Google is vulnerable to a cross site scripting attack.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48064/google-xss.txt
Source: https://packetstormsecurity.com/files/48064/google-xss.txt.html