Xss

Reflected Cross-Site Scripting (XSS) in Product Search Query

User-controlled search input is reflected without sanitization, allowing arbitrary JavaScript execution.