A Cross Site Scripting (XSS) vulnerability exists in andrewtch88 mvc-ecommerce version 1.0 within the product_catalogue.php component. This flaw allows a remote attacker to execute arbitrary code and potentially obtain sensitive information. The vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity level.