trimet.org XSS vulnerability

Vulnerable URL: http://trimet.org/got/cgi-bin/walkdir.pl?lang="'--!confirmOPENBUGBOUNTY//...