m.mlb.com XSS vulnerability

Vulnerable URL: http://m.mlb.com/fantasy/preview/y2017?team=...