Skip to content
OpenAdvisories

Vendor

thewebfosters

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2021-47908

    Ultimate POS 4.4 Persistent Cross-Site Scripting via Product Name

    Ultimate POS 4.4 contains a persistent cross-site scripting vulnerability in the product name parameter that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability through product add or edit functions to execute arbitrar…

    thewebfosters