Phppointofsale vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Phppointofsale products: 1 record(s), with severity, exploitation and fixes.

Php Point Of Sale 1

Exploited only (KEV) →

CVE-2025-41011 Medium · 6.1 CWE-79 Apr 21, 2026

HTML injection in PHP Point Of Sale

HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters.