Summary by ZAP
An XSS vulnerability was found in the www.zaproxy.org search functionality.
The vulnerability has been fixed and as this is a static site which does not store any user data we believe the impact was minimal.
Our thanks to the researcher who reported it.