lasr.net XSS vulnerability

Vulnerable URL: http://www.lasr.net/travel/state.php?South+Dakota+Car+Shows=1/-///'/"//--...