bobreeves.com XSS vulnerability

Vulnerable URL: http://www.bobreeves.com/products/trumpet/mouthpiece1.php?cup=1/-///'/"//--...