Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 6 days ago6 views

CVE-2026-32712

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Daily Sales management table. The customername column is configured with escape: false in the bootstrap-tabl...

5.4CVSS5.6AI score0.00029EPSS
Exploits1References1
NVD
NVD
added 2026/04/07 9:17 p.m.1 views

CVE-2026-32712

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Daily Sales management table. The customername column is configured with escape: false in the bootstrap-tabl...

5.4CVSS0.00029EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/07 8:37 p.m.0 views

CVE-2026-32712

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Daily Sales management table. The customername column is configured with escape: false in the bootstrap-tabl...

5.4CVSS6AI score0.00029EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2026/04/07 8:37 p.m.1 views

EUVD-2026-19939

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Daily Sales management table. The customername column is configured with escape: false in the bootstrap-tabl...

5.4CVSS6AI score0.00029EPSS
Exploits1References1
CVE
CVE
added 2026/04/07 8:37 p.m.5 views

CVE-2026-32712

Open Source Point of Sale (OSPOS) has a Stored XSS vulnerability in the Daily Sales page prior to version 3.4.3. The issue arises from the customer_name field being configured with escape: false in the bootstrap-table setup, causing customer names to render as raw HTML. With customer management p...

5.4CVSS6AI score0.00029EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/07 8:37 p.m.1 views

CVE-2026-32712 Open Source Point of Sale has Stored XSS in Customer Name (Sales)

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Daily Sales management table. The customername column is configured with escape: false in the bootstrap-tabl...

5.4CVSS6AI score0.00029EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/07 8:37 p.m.13 views

CVE-2026-32712 Open Source Point of Sale has Stored XSS in Customer Name (Sales)

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Daily Sales management table. The customername column is configured with escape: false in the bootstrap-tabl...

5.4CVSS0.00029EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.2 views

PT-2026-31017

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Daily Sales management table. The customer name column is configured with escape: false in the bootstrap-tab...

5.4CVSS6AI score0.00029EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.6 views

Open Source Point of Sale 跨站脚本漏洞

Open Source Point of Sale is an open-source sales point system based on the internet. Versions of Open Source Point of Sale prior to 3.4.3 had a cross-site scripting vulnerability. This vulnerability stemmed from improper configuration of the customername column in the Daily Sales management tabl...

5.4CVSS5.7AI score0.00029EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-53265

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00274EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:55 p.m.5 views

CVE-2022-31985

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport=...

7.2CVSS8.1AI score0.00274EPSS
Exploits1References1
OSV
OSV
added 2022/06/02 4:15 p.m.0 views

CVE-2022-31985

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

7.2CVSS7.1AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/02 4:15 p.m.2 views

CVE-2022-31985

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

7.2CVSS7.2AI score0.00274EPSS
Exploits1References2
Prion
Prion
added 2022/06/02 4:15 p.m.17 views

Sql injection

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

6.5CVSS7.3AI score0.00274EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/02 3:19 p.m.14 views

CVE-2022-31985

Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/dailysalesreport&date=...

7.6AI score0.00274EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.2 views

Badminton Center Management System SQL注入漏洞

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records.Badminton Center Management System version v1.0 is vulnerable to SQ...

7.2CVSS6AI score0.00274EPSS
Exploits1References2
Rows per page
Query Builder