The bws-google-analytics plugin prior to 1.7.1 for WordPress has multiple XSS issues.
bestwebsoft google analytics