Sql injection

SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter...