johnsonsubaru.com XSS vulnerability

Vulnerable URL: http://johnsonsubaru.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...