Skip to content
OpenAdvisories

Vendor

opensourcepos

10 known vulnerabilities.

Products

opensourcepos 7 Open Source Point of Sale 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-68434 Public exploit

    opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation

    Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery (CSRF) vulnerability exists in the application's …

    opensourcepos opensourcepos
  • High 8.1
    CVE-2025-68147 Public exploit

    opensourcepos has a Cross-site Scripting vulnerability

    Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting (XSS) vulnerability exists in the "Return Policy…

    opensourcepos opensourcepos