A BBC page has been detected as being at risk to cross site scripting (XSS).