Phppointofsale Php Point Of Sale vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Phppointofsale Php Point Of Sale: 1 record(s), with affected versions and fixes.
cpe:2.3:a:phppointofsale:php_point_of_sale

CVE-2025-41011 Medium · 6.1 CWE-79 Apr 21, 2026

HTML injection in PHP Point Of Sale

HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters.