Advisories · Technology
opensourcepos.
Every CVE that names opensourcepos among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Open Source Point of Sale has Stored XSS in Customer Name (Sales)
- opensourcepos
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Open Source Point of Sale has Stored XSS in Stock Location (Configuration)
- opensourcepos
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Open Source Point of Sale has an IDOR in Password Change (Home)
- opensourcepos
- Broken access control
- CVSS 8.8 High
Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionality
- opensourcepos
- SQL injection
- CVSS 4.3 Medium
Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field
- opensourcepos
- Cross-site scripting (XSS)
- CVSS 8.8 High
opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation
- opensourcepos
- Cross-site request forgery (CSRF)
- CVSS 8.1 High
opensourcepos has a Cross-site Scripting vulnerability
- opensourcepos
- Cross-site scripting (XSS)