CVE-2023-44163

The 'search' parameter of the processsearch.php resource does not validate the characters received and they are sent unfiltered to the database...