partner.daoyoudao.com XSS vulnerability

Vulnerable URL: http://partner.daoyoudao.com/comqueryOrderDetails.do?orderCode=705201373076243139=prompt/OPENBUGBOUNTY/...