Description
A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
Medium · 6.5
CVE-2025-70095
EUVD-2025-207541GHSA-qqhc-37jx-7gh5
A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of OpenSourcePOS v3.4.1 allows attackers to ex…
Published Feb 13, 2026 · Updated Feb 13, 2026 · Assigned by mitre