Description
Multiple cross-site scripting (XSS) vulnerabilities exist in Maian Cart. Various parameters in the shopping cart application are not properly sanitized before HTML rendering.
Impact
Attackers can inject malicious JavaScript that executes when customers or administrators browse the store, potentially stealing session cookies and compromising customer data.
Solution
Upgrade to the latest version of Maian Cart. Apply output encoding to all user-supplied data.