walfoot.be XSS vulnerability

Vulnerable URL: https://www.walfoot.be/soccer/news/ajax-get-items.php?jsoncallback=prompt/OPENBUGBOUNTY/...