local.cndy.org XSS vulnerability

Vulnerable URL: http://local.cndy.org/weather/api.php?callback=prompt/OPENBUGBOUNTY/...