Drupal E-commerce Module Multiple Cross-Site Scripting Vulnerabilities

info
discussion
exploit
solution
references

Drupal E-commerce Module Multiple Cross-Site Scripting Vulnerabilities

Solution:
The vendor has released version 4.7 revision 1.37.2.4 to address these issues. Please see the references for more information.

Drupal E-commerce 4.7

Drupal E-commerce 4.7 v 1.37.2.4
http://ftp.osuosl.org/pub/drupal/files/projects/ecommerce-4.7.0.tar.gz