chantillymazda.com XSS vulnerability

Vulnerable URL: http://chantillymazda.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...