zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')