- This could allow code injection from a malicious query leading to a form page - Thanks to Laura Pîrcălăboiu for the report