zh.freedom.tm XSS vulnerability

Vulnerable URL: https://zh.freedom.tm/login?rdr="'--!confirm/OPENBUGBOUNTY/...