sallybeauty.com XSS vulnerability

Vulnerable URL: https://www.sallybeauty.com/on/demandware.store/Sites-SA-Site/default/Search-Show?q=...