XSS is possible when user adds "> to the search term which will breake the form/something

Example "exploit":
something">sss<script>alert('lol');</script>