Andisearch Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Andisearch version 0.5.249. This issue allows users to inject malicious scripts that are not properly sanitized, leading to the execution of these scripts in the user's browser.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, enter a payload such as an image tag with an 'onerror' event into the search input. The application will search for XSS-related payloads. Due to inadequate output sanitization, the browser will execute the injected script, demonstrating the cross-site scripting vulnerability.