BuddyPress.org

signup, register and site search have been reported by godaddy’s sitescaner service as not properly sanitizing certain input openning the ability for malicious code and malware. please advise as how to / what is being / can be done to correct this issue as these are vital.

issue summary 1 (signup.php & register.php)
The remote web server hosts one or more cgi scripts that fail to adequately sanitize request strings
with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary
HTML and script code to be executed in a user’s browser within the security context of the
affected site. These XSS vulnerabilities are likely to be ‘non?persistent’ or
‘reflected’.

issue summary 2 (site search)
Your website contains pages that do not properly sanitize visitor?provided input to make sure
it contains no malicious content or scripts. Cross?site scripting vulnerabilities let
malicious users execute arbitrary HTML or script code in another visitor’s browser.