timetables.oag.com XSS vulnerability

Vulnerable URL: http://timetables.oag.com/saaroutemapper/LetterSearch.asp?ControlName=Dep〈=EN=1"...