penn.museum XSS vulnerability

Vulnerable URL: http://www.penn.museum/cgi/cuneiform.php/"'--!confirmOPENBUGBOUNTY...