Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) show.php (2) search.php and (3) view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.