CVE-2014-4743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 searchajax.tpl and 2 searchajaxsmall.tpl in templates/default/tpl/modulesearch/ in the Search module modulesearch in Kajona before 4.5 allow remote attackers to inject arbitrary web script or HTML via the search parameter...