stage.priceless.com XSS vulnerability

Vulnerable URL: https://stage.priceless.com/search?site=dmoffer=xmlnodtd=dmofferpriceless=dmofferpriceless=...