This WordPress theme is prone to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary script or HTML.
Update the theme.
jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html