New security updates were released by Qualiteam today.
AFFECTED VERSIONS:
All X-Cart versions from 4.4.0 through 4.6.1
IMPACT
- XSS vulnerability in Product_Configurator(Product Wizard) module (<= 4.6.1);
- XSS vulnerability for the Feature_Comparison module (<= 4.6.0);
- Vulnerability in the ‘Hidden Categories’ module (<=4.6.0);
- Potential XSS vulnerability of some modules and product catalogs in the Customer area (<=4.5.5)
SEVERITY:
Moderate
If you are a Finestshops’s client, simply send a request to support@finestshops.com or open a ticket at https://www.mystorehelp.com and we’ll check if your store needs this patch and install those updates for you at no charge.
To your success!
Anton Pachkine
FinestShops E-Commerce Management
Hosting | Customizations | Design | Marketing
www.finestshops.com | 1-800-675-0162
Follow me on Twitter and let’s connect in LinkedIn or Contact us to create your beautiful online storefront today!