Skip to content
OpenAdvisories

Vendor

opensourcepos

10 known vulnerabilities.

Products

opensourcepos 7 Open Source Point of Sale 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-32888

    Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionality

    Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Versions contain an SQL Injection in the Items search functionality. When the custom attribute search feature is enabled (search_custom filter), use…

    opensourcepos opensourcepos
  • High 8.8
    CVE-2025-68434 Public exploit

    opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation

    Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery (CSRF) vulnerability exists in the application's …

    opensourcepos opensourcepos
  • High 8.1
    CVE-2025-68147 Public exploit

    opensourcepos has a Cross-site Scripting vulnerability

    Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting (XSS) vulnerability exists in the "Return Policy…

    opensourcepos opensourcepos