cross site scripting in mystats.php

[geeknik]

GET /~wizkid057/newstats/mystats.php?storecookie=on&u=1'%22()%26%25<acx><ScRiPt%20>prompt(133713)</ScRiPt> HTTP/1.1

This script does not properly filter metacharacters from user input which could allow malicious users to inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable web application to fool a user in order to gather data from them.

[wizkid057]

No passwords or anything here. Nothing for an attacker to gain. Will fix anyway, but not a priority. Thanks.