thepalacegroup.com XSS vulnerability

Vulnerable URL: http://www.thepalacegroup.com/datastore/banking/getbanking.asp?ul=uk=db=prompt/OPENBUGBOUNTY/...