XSS in several profile fields

Several fields in user profile are vulnerable to Cross Site Scripting (XSS). Basically, you can put any script and it will be executed (the only limitation is the length of the fields).

First Name

Last Name

Company

Phone

Blog (External Links)

Blog Feed (External Links)

Proof of concept: 

Put these in any of the mentioned fields: "><script>alert("hello1")</script>. When you save the profile and view it, it's when the script is executed.