Interspire (formerly StoreSuite) was found to have an XSS vulnerability. It takes time to armor against these things; hopefully they're doing that now.
TheCartBlog.com - musings, rants and raves on the world of shopping carts and e-commerce, fortified with related business, legal and economic news, as well as announcements about my work on Zen Cart. Brought to you by That Software Guy.