personalsavings.americanexpress.com XSS vulnerability

Vulnerable URL: https://personalsavings.americanexpress.com/application/app/nao?intlink=X"...