napovednik.com XSS vulnerability

Vulnerable URL: http://www.napovednik.com/box.php?jsoncallback=prompt/OPENBUGBOUNTY/...