barunsoncard.com XSS vulnerability

Vulnerable URL: http://www.barunsoncard.com/event/event2016anniversary47listproc.asp?jsoncallback=prompt/OPENBUGBOUNTY/...