
In this case, the fact that SSL is being used on the login page, does not necessarily mean that the users' login information is secured.
UPDATE: this was fixed a few hours after publishing it.
Malicious people can exploit this Google XSS to propagate malware, spyware, adware and steal authentication credentials.