description: Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.
problem types: Authenticated Persistent Cross-site Scripting
affected:
{
product: WallacePOS
vendor: n/a
versions:
status: affected, version: 1.4.3
}