X-CART e-Commerce 5.1.8 Cross Site Scripting

X-CART e-Commerce version 5.1.8 suffers from a cross site scripting vulnerability.