Comment Comment by cft Can you explain why this is a real vulnerability? The user himself must put that JS in the search box. parent cft 13 years ago