Wordpress Google Analytics Plugin Cross-Site Scripting Exploit

Input passed to the "s" parameter in index.php is not properly sanitised before being returned to the user in googleanalytics.php. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
Vulnerabilty ID: 
Released Date: 
Monday, January 25, 2010 - 18:00