Vulnerability title: Stored XSS In Open Source Point of Sale CVE: CVE-2015-0299 Vendor: http://sourceforge.net/projects/opensourcepos/ Product: Open Source Point of Sale Affected version: 2.3.1 Fixed version: - Reported by: Arturo Rodriguez Details: Multiple parameters are vulnerable to stored XSS within the application. The attacker needs to be authenticated in order to exploit this vulnerability.