A Cross Site Scripting (XSS) vulnerability exists in SureCart versions up to and including 4.2.2. This vulnerability allows an attacker with limited privileges to execute scripts in the context of another user. The issue is categorized under CWE-79 and has a medium severity rating based on available data.