This codeigniter news tut was made intentionally xss vuln exploit at will! Our devz are hard at work fixing this vuln with a patch.