VM3.2 Sitelock Security Cross-Scripting Vulnerability?

[navi8001]

Hi, I have a godaddy sitelock scanner running and it  recently found during a scan  a vulnerability on 3 (Product)  urls running on my site. 

There are 498 product urls which are not showing any vulnerabilities.

I am wondering if this is a false positive as I can't get any more information about the vulnerability other "than these 3 links are vulnerable" from either sitelock or godaddy.

I upgraded to virtuemart 3.2.2. late last week prior to the scan failing (although it appears it may only run once per month).  I am also running Joomla 3.7.2.

Has anyone else reported any vulnerabilities and/or is there someone I can look to find out if this is a real issue or not.

Thanks