Unscored CVE-2019-3958 EUVD-2019-13565GHSA-fg23-v8v2-8rg6

Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XS…

Published Jul 31, 2019 · Updated Aug 4, 2024 · Assigned by tenable

Description

Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.

Affected products

Vendor	Product	Affected	Fixed
—	WallacePOS	1.4.3	—

References

https://www.tenable.com/security/research/tra-2019-37