Cross Site Scripting (XSS) in current version.

My host keeps bugging me about this, I don’t really care but evidently they do and they keep telling me get this fixed. Now I know how to install code if you tell me which file and which line to put it on if you don’t care to upgrade the plugin.

I’m thinking of a security plugin that protects from this if you are no longer going to upgrade the plugin. I wonder if this will get the host off my back?

The page I need help with: [log in to see the link]