c1wan.com XSS vulnerability

Vulnerable URL: http://www.c1wan.com/payment-server?jsoncallback=prompt/OPENBUGBOUNTY/...