This vulnerability in Exrick xmall up to commit 19e7917d5ed3bd2a2421a3a246ad494c133ba94c involves a cross-site scripting flaw in an unknown function of the order-print.jsp file in the Order Printing component. Successful exploitation requires remote manipulation and results in reflected or stored XSS. The rolling release approach of the product means no explicit versioning details are available for affected or patched releases. The vendor has been notified but has not provided a response or patch at the time of this report.

An attacker can remotely exploit this vulnerability to inject malicious scripts into the order-print.jsp page, potentially leading to execution of arbitrary scripts in the context of the victim's browser. This could result in session hijacking, defacement, or other client-side attacks. The CVSS score of 5.3 reflects a medium impact with no privileges or user interaction required beyond UI interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should monitor official channels for updates. Until a fix is available, consider applying input validation or output encoding workarounds if possible to mitigate XSS risks in the affected component.