autotrader.ca XSS vulnerability

Vulnerable URL: http://www.autotrader.ca/cars/ford/escape/?hprc=True=True=New-Used'--...