ckpgroup.com XSS vulnerability

Vulnerable URL: http://www.ckpgroup.com/versace/yellowdiamond.php?comefrom=1"...