A Cross-Site Scripting (XSS) vulnerability exists in Welcart e-Commerce up to version 2.12.6 due to improper neutralization of script-related HTML tags. This flaw allows an attacker to inject code, potentially impacting the integrity and availability of the application.