bnsfcontractor.com XSS vulnerability

Vulnerable URL: https://bnsfcontractor.com/photoupload/form.asp?studentid=1/-///'/"//--...