U.S. Dept Of Defense: XSS Reflected

Hi Team , I found that https://████████/████/household/updateProfileInfo.action has vulnerability by XSS Reflected in household.householdID parameter . I can verify it with following URL: https://█████████/██████/household/updateProfileInfo.action?household.householdID=%27;alertdocument.domain//...