cto.med.umich.edu XSS vulnerability

Vulnerable URL: http://cto.med.umich.edu/main.asp?rolename=1"...