[FrankPetser]

Hmm, does your site have a message board or some other place where people can post stuff like a shoutbox for example? If you allow html and javascript to be posted there someone can easily post all sorts of scripts there.