marca.com XSS vulnerability

Vulnerable URL: http://www.marca.com/deporte/ciclismo/giroalert/XSSPOSED/...