There are window.alert() popping up, the website is vulnerable to XSS.