<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: opensourcepos</title><description>Every new CVE for opensourcepos.</description><link>https://agentprime.io/</link><item><title>CVE-2026-32712: Open Source Point of Sale has Stored XSS in Customer Name (Sales)</title><link>https://agentprime.io/advisories/CVE-2026-32712/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-32712/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Apr 2026 20:37:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-39380: Open Source Point of Sale has Stored XSS in Stock Location (Configuration)</title><link>https://agentprime.io/advisories/CVE-2026-39380/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-39380/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Apr 2026 19:49:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33730: Open Source Point of Sale has an IDOR in Password Change (Home)</title><link>https://agentprime.io/advisories/CVE-2026-33730/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33730/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 00:30:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-32888: Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionality</title><link>https://agentprime.io/advisories/CVE-2026-32888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-32888/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 02:14:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68658: Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field</title><link>https://agentprime.io/advisories/CVE-2025-68658/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68658/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Jan 2026 21:25:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68434: opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation</title><link>https://agentprime.io/advisories/CVE-2025-68434/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68434/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 22:20:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68147: opensourcepos has a Cross-site Scripting vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-68147/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68147/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Dec 2025 22:16:36 GMT</pubDate><category>CVE</category></item></channel></rss>