hvacsavesoftware.com XSS vulnerability

Vulnerable URL: http://www.hvacsavesoftware.com/popupcalendar.asp?when=201608=1/-///'/"//--...