obi.at XSS vulnerability

Vulnerable URL: http://www.obi.at/bk/html/index.html?catId="...