client.moscowstud.com XSS vulnerability

Vulnerable URL: https://client.moscowstud.com/order/workjson?jsoncallback=prompt/OPENBUGBOUNTY/...