vilanova.cat XSS vulnerability

Vulnerable URL: http://www.vilanova.cat/jsp/utils/cercador.jsp?q=prompt/OPENBUGBOUNTY/...