XSS in CubeCart <= 2.0.7

CubeCart http://www.cubecart.com up to version 2.0.7 inclusive are vulnerable to a XSS in salecat.php. http://www.example.com/storedirectory/salecat.php/";scriptalertdocument.cookie/script...