medium5.4
CVE-2019-3958
Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a cra…
Impact
Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wallaceit | Wallacepos | Version 1.4.3 |