Dom-Based XSS on parameter ?vsid=

Summary

Researcher found a DOM XSS vulnerability in one of the JetBlue applications using the vsid parameter. The researcher used the below payload to trigger XSS:

#');alert(1);//