cristobalpazmino.com XSS vulnerability

Vulnerable URL: http://www.cristobalpazmino.com/play.php?son=COLIZOCO.mp3=1"...