Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.
https://y0ungdst.medium.com/xss-in-jenzabar-cve-2021-26723-a0749231328
https://gist.github.com/Y0ung-DST/d1b6b65be6248b0ffc2b2f2120deb205
http://packetstormsecurity.com/files/161303/Jenzabar-9.2.2-Cross-Site-Scripting.html