Description
SQL injection and cross-site scripting (XSS) vulnerabilities exist in Maian Search. Search parameters and other inputs are not properly sanitized.
Impact
SQL injection allows attackers to extract database contents including user credentials. XSS enables session hijacking through cookie theft.
Solution
Upgrade to the latest version of Maian Search. Use parameterized queries and output encoding.