Winter: Reflected XSS through the search query parameter in the backend Table widget

Impact

Affected versions of Winter CMS render the search query parameter without HTML encoding inside a block in the backend Table widget partial (modules/backend/widgets/table/partials/_table.php):

value=" get('search') ?>"