Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-40290 EUVD-2022-43587GHSA-mc95-w48p-72ww

Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

Published Oct 31, 2022 · Updated May 6, 2025 · Assigned by TML

Description

The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode generation functionality, allowing attackers to generate an unsafe link that could compromise users.

Affected products

VendorProductAffectedFixed
PHP Point of Sale PHP Point of Sale — —

References