gaivota.org XSS vulnerability

Vulnerable URL: http://gaivota.org/api.php?callback=prompt/OPENBUGBOUNTY/...