In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.
crea8social crea8social 2018.2