Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- http://marc.info/?l=bugtraq&m=111221890614271&w=2
No PoCs found on GitHub currently.