Serious security vulnerability in xt:Commerce v3.x and modified eCommerce Shopsoftware

A serious security vulnerability in customer registration allows attackers to inject malicious code and take over the shop. This vulnerability is already being exploited in shops. As a member of the modified eCommerce Shopsoftware team, we immediately provided an appropriate patch.

In addition to this official patch, we have created a larger security package that closes other potential vulnerabilities that have not yet been exploited. We recommend that operators of the shop systems mentioned install this security package. You can commission us directly to install it. Simply email us or call us directly.