    public function getTags($refreshCache = false) {
        if ($this->_tags === null || $refreshCache) {
            $this->_tags = Yii::app()->db->createCommand()
                ->select('tag')
                ->from(CActiveRecord::model('Tags')->tableName())
                ->where(
                    'type=:type AND itemId=:itemId', 
                    array(
                        ':type' => get_class($this->getOwner()), 
                        ':itemId' => $this->getOwner()->id))
                ->queryColumn();
        }
        return $this->_tags;
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.