I found some XSS with ?tag=

so I ask agan
http://somesite.com/?tag='”><script>alert(1)</script&gt;
I would like to know how to go about fixing it.
but I’m not sure if this is a hole in WP or my Theme?
is any one out there running wp 3.0.1 getting this xss?

yeah but i really dont want to post it on here -_-

i also found somemore
http://somesite.com/?tag='”><script>alert(1)</script&gt;
http://somesite.com/?cat='”><script>alert(1)</script&gt;
http://somesite.com/?m='”><script>alert(1)</script&gt;
http://somesite.com/?s='”><script>alert(1)</script&gt;
http://somesite.com/?page_id='”><script>alert(1)</script&gt;
http://somesite.com/?author='”><script>alert(1)</script&gt;

so what your saying is someone hacked me & made it so the XSS works with tag,cat,m,page_id,author
i dont think i was hacked its got to be a bad plugin or theme
I’m running Atahualpa theme 3.5.3

I did it & found out its Global Translator Version 1.3.2
I need to some how get a hold of the maker
or can you do that?

yeah I did not know if Samuel B
had some way of getting a hold of him faster.
all I do know is the maker of that plugin is not easy to get a hold of
& Global Translator is not the kind of plugin I can go with out.
if I do I will piss off google when all the many translated pages start to not show up if I have the plugin off.

p.s.
Thanks for all of your help everyone 😉