CVE-2007-5434

The CVE-2007-5434 entry describes a cross-site scripting (XSS) vulnerability in PRO-search versions up to 0.17.1, where an attacker can inject arbitrary script or HTML via the q parameter to the default URI. The issue stems from unsanitized user input in the query parameter, enabling remote scrip...