SAP Commerce does not sufficiently validate user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability in storefronts that are based on the product. Fixed in versions (SAP Hybris Commerce versions 6.2 6.3 6.4 6.5 6.6 6.7).