AbanteCart Cross-Site Scripting Vulnerability

AbanteCart is a free PHP-based e-commerce solution. A cross-site scripting vulnerability exists in the address1 parameter of the New Order page in AbanteCart version 1.2.7, which stems from the program failing to adequately filter user-submitted input. An attacker could use this vulnerability to...