A security risk found and reported by
DAVE (Thank you Dave) in the assetmanager, plus some other variables in the code that had left unvalidated. All have fixed immediatelly, and the update version 1.1.0 has been released.
To Update:
1.- REMOVE COMPLETELLY the directory ecommerce/editor/assetmanager/
2.- Upload cart.php, cart_gateway.php and clientarea.php to your forum directory
3.- Upload ecommerce_admin.php to your admincp
4.- Import product-ecommerce.xml just to update the version number.
Once again I want to thank
DAVE for his help. After 10 years and 50+ addon releases is the first one who contact me to report these issues instead to report them for addon removal.