search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.
Published August 13, 2020.
Themeinprogress Nova Lite