Advisories · Technology
appsbd Vitepos – Point of Sale (POS) for WooCommerce.
Every CVE that names appsbd Vitepos – Point of Sale (POS) for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Vitepos <= 3.5.1 - Unauthenticated SQL Injection via 'src_by' Parameter
- appsbd Vitepos – Point of Sale (POS) for WooCommerce
- SQL injection
- CVSS 6.5 Medium
Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injection via 'src_by[].val' Parameter via 'bt' Operator
- appsbd Vitepos – Point of Sale (POS) for WooCommerce
- SQL injection
- CVSS 8.8 High
Vitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code Execution
- appsbd Vitepos – Point of Sale (POS) for WooCommerce
- Unrestricted file upload