city-oberland.ch XSS vulnerability

Vulnerable URL: https://www.city-oberland.ch/booking/modules/hotelextended/calendar.php?arrive=1〈=en=2017=06=city-oberland=Y-m-d=arrive=1"...