Skip to content
OpenAdvisories

Vendor

Ultimate Fosters

4 known vulnerabilities.

Products

Perfect Support Ticketing & Document Management System 2 Ultimate POS (Stock Management & Point of Sale) 1 UltimatePOS 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-70560

    Ultimate POS Stored XSS via First Name Field in Leave Notifications

    Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field duri…

    Ultimate Fosters Ultimate POS (Stock Management & Point of Sale)
  • Medium 5.4
    CVE-2026-63082

    Perfect Support Ticketing System 1.7 Broken Access Control via Agent Assignment

    Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control vulnerability that allows authenticated attackers with Agent-level privileges to manipulate the Support Agent assignment field of tickets by bypassing intended…

    Ultimate Fosters Perfect Support Ticketing & Document Management System
  • Medium 5.4
    CVE-2026-63081

    Perfect Support Ticketing System 1.7 Stored XSS via Ticket Notes Field

    Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross-site scripting vulnerability that allows authenticated attackers with Agent-level privileges to inject malicious payloads into the Notes field of assigned support ticke…

    Ultimate Fosters Perfect Support Ticketing & Document Management System
  • Medium 5.1
    CVE-2025-40980

    ddd

    A Stored Cross Site Scripting vulnerability has been found in UltimatePOS by UltimateFosters. This vulnerability is due to the lack of proper validation of user inputs via ‘/products/<PRODUCT_ID>/edit’, affecting to ‘name’ parameter via POST. The vulnerabilit…

    Ultimate Fosters UltimatePOS