dev.bib.hs-hannover.de XSS vulnerability

Vulnerable URL: http://dev.bib.hs-hannover.de/chat/patron/ajaxinit.php?jsoncallback=prompt/OPENBUGBOUNTY/...