JShop has a flaw in page.php that allows for cross site scripting attacks.
09ce1578e5d1e6cf20228662db59cd5e311a262c1bd1c3a532a675641ae5b29f
Cart32 suffers from an input validation flaw that allows for cross site scripting attacks.
f8106fd151c332f8cfb901effa0b209c6a4fea390a67c49519fe4d51dab84f71