Security Bigware Shop 2.3.01 Cross Site Scripting / File Upload December 25, 2015 007admin Leave a comment Bigware Shop version 2.3.01 suffers from cross site scripting and remote file upload vulnerabilities.