Lucene search
+L

8 matches found

NVD
NVD
added 2026/02/13 4:16 p.m.16 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

6.5CVSS0.00169EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/02/13 12:00 a.m.8 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

5.5AI score0.00169EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/02/13 12:00 a.m.44 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

0.00169EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/02/13 12:00 a.m.15 views

opensourcepos 安全漏洞

OpenSourcePOS is an open-source point-of-sale system. Version 3.4.1 of OpenSourcePOS contains a security vulnerability. This vulnerability stems from insufficient input validation for the Item Category parameter in the Generate Item Barcode function, which may lead to cross-site scripting attacks...

6.5CVSS5.6AI score0.00169EPSS
SaveExploits1References3
attackerkb
attackerkb
added 2026/02/13 12:00 a.m.6 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

5.5AI score0.00169EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/13 12:00 a.m.34 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

5.5AI score0.00169EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/02/13 12:00 a.m.15 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

6.5CVSS5.6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/02/13 12:00 a.m.18 views

PT-2026-7996

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

6.5CVSS5.5AI score0.00169EPSS
SaveExploits1References4
Rows per page
Query Builder