Skip to content
OpenAdvisories
Critical · 9.0 CVE-2022-40287 EUVD-2022-43584GHSA-4qxm-6rr2-4xf8

Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via user profile data fields.

Published Oct 31, 2022 · Updated May 6, 2025 · Assigned by TML

Vendor: PHP Point Of Sale Product: PHP Point Of Sale

Description

The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messaging functionality, leading to privilege escalation or a compromise of a targeted account.

Affected products

VendorProductAffectedFixed
PHP Point of Sale PHP Point of Sale — —

References