hickorywhite.com XSS vulnerability

Vulnerable URL: http://www.hickorywhite.com/catalogresults.php?roomtype=all+roomstype=chairstyle=1/-///'/"//--...