PHPCart versions 3.4 through 4.6.4 suffer from cross site scripting and price manipulation vulnerabilities.