fs-location.de XSS vulnerability

Vulnerable URL: http://www.fs-location.de/trigger/getHistoryStreamJSON.php?jsoncallback=prompt/OPENBUGBOUNTY/...