Xopie Virtual Shop suffers from a cross site scripting vulnerability. Note that this advisory has site-specific information.