CVE-2016-10245: Improper Neutralization of Input During Web Page Generation

Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scripting or iframe injection...