Cross-site scripting (XSS) vulnerability in order.php in DHCart allows remote attackers to inject arbitrary web script or HTML via the (1) domain and (2) d1 parameters.
- http://lostmon.blogspot.com/2008/11/dhcart-multiple-variable-xss-and-stored.html
No PoCs found on GitHub currently.