schoolbag.ru XSS vulnerability

Vulnerable URL: http://schoolbag.ru/my/s3/captcha/get.php?callback=prompt/OPENBUGBOUNTY/...