The remote web server is prone to cross-site scripting attacks

as scanned by godaddy website protection on 3-31-2012, here is what it says. Can someone please help me fix this? !! Thanks!! note: there are 2 issues, I will post them separate:
1st issue

Description:
The remote web server hosts cgi scripts that fail to adequately
sanitize parameters name of malicious JavaScript. By leveraging this
issue, an attacker may be able to cause arbitrary HTML and script code
to be executed in a user's browser within the security context of the
affected site.

Risk Factor:
Medium / CVSS Base Score : 4.3(CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N)

Solution:
Contact the vendor for a patch or upgrade
Output:
Using the GET HTTP method, Site Scanner found that :

• The following resources may be vulnerable to XSS (on parameters names) :
  /index.php?<<<<<<<<<<foo"bar'314>>>>>=1
  -------- request --------
  GET /index.php?<<<<<<<<<<foo"bar'314>>>>>=1 HTTP/1.1\r
  Host: stageandtheaterlighting.com\r
  Accept-Charset: iso-8859-1,utf-8;q=0.9,*;q=0.1\r
  Accept-Language: en\r
  Connection: Close\r
  User-Agent: Mozilla/5.0 (compatible; MSIE 7.0; MSIE 6.0; Site Scanner Bot; +http://www.websiteprotection.com) Firefox/2.0.0.3\r
  Pragma: no-cache\r
  Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, /

-------- output --------
<img id="close-pic" class="close-pic float-right" src="includes/te [...]

I left out one bit of info... at the top of the warning message it says .. Port: http (80/tcp)

This particular issue stems from the template you are using. Contact the template creator to see if there is an update.

Thank you