Online Shopping Alphaware version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.