The cross-site scripting vulnerability is rearing its ugly head again. Be warned.