tackthis.com XSS vulnerability

Vulnerable URL: https://www.tackthis.com/json/auth.php?callback=prompt/OPENBUGBOUNTY/...