Project: 
Search API Pages
Date: 
2021-December-08
Security risk: 
Critical 16 ∕ 25 AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:Uncommon
Vulnerability: 
Cross Site Scripting
Description: 

This module enables you to create simple search pages based on Search API without the use of Views.

The module doesn’t sufficiently escape all variables provided for custom templates.

This vulnerability is mitigated by the fact that the default template provided by the module is not affected.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: