In ICEcoder 8.0 allows a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET'replace' variable. As a result arbitrary Javascript code can get executed.