Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter. NOTE: some of these details are obtained from third party information.
https://www.exploit-db.com/exploits/8737
https://exchange.xforce.ibmcloud.com/vulnerabilities/50635