Wallacepos Cross-Site Scripting Vulnerability

wallacepos is a web-based POS system. A cross-site scripting vulnerability exists in wallacepos version 1.4.1, which stems from the program's failure to adequately filter user data submitted to wallacepos-master/myaccount/resetpassword.php. A remote attacker can exploit this vulnerability to...