Vulnerability repeated on line 553 of same file:
$replacement .= ‘<input type=”hidden” name=”wspsc_product” value=”‘ . $name . ‘” /><input type=”hidden” name=”price” value=”‘ . $price . ‘” /><input type=”hidden” name=”shipping” value=”‘ . $shipping . ‘” /><input type=”hidden” name=”addcart” value=”1″ /><input type=”hidden” name=”cartLink” value=”‘ . cart_current_page_url() . ‘” />’;
