funformobile.com XSS vulnerability

Vulnerable URL: http://www.funformobile.com/api/getmyfriendlist.php?act=get=prompt/OPENBUGBOUNTY/...