Allaire's Security Zone has issued Alert #ASB00-05: Cross-Site Scripting Vulnerability Information for Allaire Customers. Security Best Practice Article 14558 discusses validating browser input. Not a new vulnerability, "this particular problem has existed for years, and happens only when applications do not adequately validate end-user input."