A Google cross-site scripting vulnerability within a web-hosting service has been discovered by security researchers, the third such problem identified in recent weeks.