We were alerted to this "less critical" Secunia advisory on a possible cross-site scripting (XSS) vulnerability in versions of SyntaxCMS from 1.2.1 forward (the most recent release). We have patched this in CVS, so if you're running that version and are concerned, just update private/modules/search/results.php from CVS.
If you didn't check out your installation from CVS, just add these lines after $search_query has been defined: