Launchpad.net

CVE 2019-7220

X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter.

See the CVE page on Mitre.org for more details.