Search content hijacking with search plugins, crossite scripting with link tag.
vulners.com/securityvulns/securityvulns:doc:8366
vulners.com/securityvulns/securityvulns:doc:8367