CVE-2022-40294

creationtimestamp| type| source ---|---|--- 2022-10-31 23:13:23+00:00| seen| https://t.me/cibsecurity/52319...

CVE-2022-40294

CVE-2022-40294 concerns a CSV injection in the data export functionality of PHP Point of Sale version 19.0 from PHP Point of Sale, LLC. The vulnerability allows malicious code to be embedded in exported data and triggered in spreadsheet/viewer applications. The connected sources confirm the issue...

CVE-2022-40294 CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC

The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers...