Virtual Freer Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in the 'qty' parameter on the 'irect.php ' page in Virtual Freer version 1.58, which allows attackers to inject their own malicious scripts...