corseclienti.ferrari.com XSS vulnerability

Vulnerable URL: http://corseclienti.ferrari.com/2014en/wp-content/themes/cc/ajax/video-player.php?videourl=alert'OPENBUGBOUNTY';...