jcofontario.com XSS vulnerability

Vulnerable URL: http://jcofontario.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...