[EN] TomatoCart 1.1.7 vulnerable to XSS

 For example:

../tomatocart/ext/securimage/example_form.ajax.php:39:

           new Ajax.Request('<?php echo $_SERVER['PHP_SELF'] ?>',

Cheers o/