Lucene search
+L

5 matches found

NVD
NVD
•added 2026/08/12 12:19 p.m.•21 views

CVE-2026-70560

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS0.00203EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/12 11:17 a.m.•18 views

EUVD-2026-57170

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS5.2AI score0.00203EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/12 11:17 a.m.•17 views

CVE-2026-70560

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS5.2AI score0.00203EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/12 12:00 a.m.•0 views

CVE-2026-70560: Improper Neutralization of Input During Web Page Generation

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS6AI score0.00203EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•10 views

PT-2026-71057

Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...

5.4CVSS5.2AI score0.00203EPSS
SaveExploits0References4
Rows per page
Query Builder