RXSS in ███ via S parameter

Summary

A Reflected Cross-Site Scripting (RXSS) vulnerability is identified in the search functionality of the application. The vulnerability is triggered when a user manipulates the search parameter 's'. When the search statement is edited by a victim, malicious JavaScript code can be executed in their browser context. The vulnerability is discovered in the application's search feature, where user input is not properly sanitized before being reflected back to users.