CVE-2019-3958: Wallaceit Wallacepos

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Insufficient output sanitization in WallacePOS 1.4.3 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.

Affected products

• Wallaceit Wallacepos: version 1.4.3 only

Published 2019-07-31. Last modified 2026-06-17.