Description X-Cart V5 is vulnerable to XSS via the CategoryFilter2 parameter. References https://www.x-cart.com/blog https://cxsecurity.com/issue/WLB-2019020192