bikewashington.org XSS vulnerability

Vulnerable URL: http://bikewashington.org/canal/pda/miles.php?mile=1/-///'/"//--...