/search/index.cfm crossite scripting

/search/index.cfm allows insert HTML tags via search paramter...