// W3C

themes/default/404.tpl

@@ -30,7 +30,7 @@
 	</p>
 
 	<h3>{l s='To find a product, please type its name in the field below.'}</h3>
-	<form action="{$link->getPageLink('search')}" method="post" class="std">
+	<form action="{$link->getPageLink('search')|escape:'html'}" method="post" class="std">
 		<fieldset>
 			<p>
 				<label for="search">{l s='Search our product catalog:'}</label>