CVE-2012-2631: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...