Vulnerabilidades de Phppointofsale

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Phppointofsale: 1 registro(s), com severidade, exploração e correções.

Php Point Of Sale 1

Somente exploradas (KEV) →

CVE-2025-41011 Média · 6.1 CWE-79 21/04/2026

HTML injection in PHP Point Of Sale

HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters.