[jmccunep]

For the latest x-cart XSS vulnerability patch issued in early OCtober, can the patch files and SQL be applied as is? Or with the Ability template were some of the files that have to be patched modified so one must therefore use the (tedious!) manual DIFF file patch process?

The patch in question (for xcart 4.4.5 version):
security-patch-2013-10-08_4.4.5.tgz

There are MANY PHP and TPL files in this patch.

THANKS!