The G3 Content Management Framework suffers from a cross site scripting flaw in its search functionality.