Multiple cross-site scripting (XSS) vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-09-29 12:59
Updated : 2015-09-30 09:14
NVD link : CVE-2015-0299
Mitre link : CVE-2015-0299
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
open_source_point_of_sale_project
- open_source_point_of_sale