Zeuscart 4 Cross Site Scripting / SQL Injection

Zeuscart version 4 suffers from cross site scripting and remote SQL injection vulnerabilities.