CVE-2019-3958

Summary

Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.

Affected Software

VendorProductVersion RangeStatus
n/aWallacePOS1.4.3affected

Weaknesses

  • Authenticated Persistent Cross-site Scripting

ADP Enrichment

CVE Program Container

Additional References

References