usapa.org XSS vulnerability

Vulnerable URL: http://usapa.org/iframe/ptp/index.php?code=1/-///'/"//--...