Cross-site Scripting (XSS)

libkiwix.so is vulnerable to cross-site scriptingXSS attacks. The library does not properly escape the searchURL parameter in the built-in webserver functionality, which allows an attacker to inject and execute malicious code...