Ecshop XSS cross-site scripting vulnerability directly in the background

Versions affected by the vulnerability have not been confirmed yet! In some versions, after you insert it into the file, a file will confirm the value you inserted. In that version, X is not a bird! Almost all other versions are supported! It exists in the place where ecshop places an order! Fill in the order details, because there is a version that requires printing the order to be X! You only need to enter your XSS code in the input box of the nearby marker of the order! Then write in the remarks and submit the order directly! In terms of the versions currently tested, some orders will be placed X to another order to be printed!

Solution:It seems that the latest version can print the order and execute the code! You can understand the fix! Your other version is very good...