Fri. 21st December, 2012
It has been discovered that the extension commerce (commerce) is vulnerable to Cross Site Scripting.
This is a companion discussion topic for the original entry at https://typo3.org/article/several-vulnerabilities-in-extension-commerce-commerce/