:Christian Holler has reported a vulnerability in Sphider, which can be exploited by malicious people to conduct cross-site scripting attacks.Input passed to the "query" parameter in search.php when the suggestion feature is enabled is not properly sanitised before being returned to a user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.The vulnerability affects versions prior to 1.3.4.Solution:Update to version 1.3.4.http://www.sphider.eu/download.phpProvided and/or discovered by:Christian HollerOriginal Advisory:Christian Holler:http://users.own-hero.net/~decoder/advisories/sphider134-xss.txtSphider:http://www.sphider.eu/forum/read.php?2,4121

Original post by Pankaj