"This fairly serious XSS discovered by Mattia Furlani pertained only the administration area, so most shops are not affected.
Shop owners running a multi-vendor store or fearing that their employees may use this leak should update as soon as possible."
Don't take any chances.
Download and install the latest Virtuemart security release.
Backup your website first!
ALWAYS perform a FULL back up your website before updating any extensions.
Joomla! extension updates can and do stall, and when they do they can break your website!
WYNCHCO Joomla! CMS Support
We coach, help and support managers with responsibility for Joomla! websites in organisations across Cheshire, Manchester, Merseyside, North West England & the UK.