CVE-2015-7344

HikaShop Joomla Component before 2.6.0 has XSS via an injected payload/caption...