A vulnerability has been reported in DataparkSearch, which can be exploited by malicious people to conduct cross-site scripting attacks.

Some unspecified input isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability has been reported in version 4.36. Prior versions may also be affected.

Solution
Update to version 4.37:
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area