login.yorkdispatch.com XSS vulnerability

Vulnerable URL: https://login.yorkdispatch.com/PPYD-GUP/password-forgot/?cancel-url="/alert/openbugbounty/...