E-Store Kit-2 PayPal Edition is susceptible to file include and cross site scripting vulnerabilities.