Deriv.com: Cross site scripting

anon-j reported a valid cross site scripting issue in one of our subdomains...