Search 404 - Moderately Critical - Cross Site Scripting

* Advisory ID: DRUPAL-SA-CONTRIB-2017-053
* Project: Search 404 (third-party module)
* Version: 7.x
* Date: 2017-June-21
* Security risk: 13/25 ( Moderately Critical)
* Vulnerability: Cross Site Scripting

DESCRIPTION

The Search 404 module enables you to redirect 404 pages to a search page on
the site for the keywords in the url that was not found.

The module did not filter administrator-provided text before displaying it to
the user on the 404 page creating a Cross Site Scripting (XSS) vulnerability.