dancefavourite.com XSS vulnerability

Vulnerable URL: http://www.dancefavourite.com/Product.asp?small=1/-///'/"//--...