Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5 4.6 and 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) page (2) c or (3) redirect parameter to index.php or (4) search field (searchTerm parameter) in the main page.