CVE-2022-40289

🗓️ 31 Oct 2022 20:07:42Reported by TMLType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 50 Views

The app had authenticated Stored XSS in upload/download, leading to privilege escalation or account compromise

Reporter	Title	Published	Views	Family All 8
CNNVD	PHP Point of Sale 跨站脚本漏洞	31 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-40289 Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality.	31 Oct 202220:07	–	cvelist
EUVD	EUVD-2022-43586	3 Oct 202520:07	–	euvd
NVD	CVE-2022-40289	31 Oct 202221:15	–	nvd
OSV	CVE-2022-40289	31 Oct 202221:15	–	osv
Prion	Cross site scripting	31 Oct 202221:15	–	prion
Positive Technologies	PT-2022-25324 · Php Point Of Sale Llc +1 · Php Point Of Sale	31 Oct 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-40289 Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality.	31 Oct 202220:07	–	vulnrichment

NVD

Node

phppointofsale php_point_of_saleMatch19.0

[
  {
    "defaultStatus": "unaffected",
    "product": "PHP Point of Sale",
    "vendor": "PHP Point of Sale LLC",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]