Hi Everyone,
We will work with PayPal to make sure their account managers have right understanding of X-Cart product line vs PCI compliance requirements.
indizine, I advise to have that client sign some paper where he will confirm that he was informed about consequences of using old X-Cart versions with non-compliant integrations. At least you will have some protection if he is fined after all.
Recently an Australian merchant using old version of X-Cart was fined by his bank due to big leak of credit card details and forced to change payment method. I fear I can't disclose more details due to privacy policy.