CVE-2019-3958

2019-07-3118:15:11

Google

osv.dev

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.

CPENameOperatorVersion
wallaceposeq1.4.0
wallaceposeq1.1
wallaceposeq1.4.3
wallaceposeq1.4.1
wallaceposeq1.2
wallaceposeq1.3

Name	Operator	Version
wallacepos	eq	1.4.0
wallacepos	eq	1.1
wallacepos	eq	1.4.3
wallacepos	eq	1.4.1
wallacepos	eq	1.2
wallacepos	eq	1.3

References

www.tenable.com/security/research/tra-2019-37