XSS scan vulnerability

HI there.
My client moved to Host Gator and we got Sitelock. They flagged us for 3 lines of code during the XSS scan:
URL:http://www.bonnetpro.com?=1&s=1
Cross site scripting vulnerability found in args:,s
URL:http://www.bonnetpro.com?=Search&s=1
Cross site scripting vulnerability found in args:,s
URL:https://www.bonnetpro.com?=1&s=1
Cross site scripting vulnerability found in args:,s

Until we fix these, they have ‘decertified’ us. I am at a loss since I am not a coder and did not know if this is a theme related issue.

Do you have any fixes for this?
Thanks very much. You have been very helpful, recently with A Fortuna Revolution slider problem. You found and fixed it! Thanks you, Kal.

Best,
Elaine