crystalgage.com XSS vulnerability

Vulnerable URL: http://www.crystalgage.com/toursp.php?id=9'"--!confirmOPENBUGBOUNTY...