Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
added 2026/02/14 1:28 a.m.12 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

6.5CVSS5.5AI score0.00169EPSS
SaveExploits1References1
NVD
NVD
added 2026/02/13 4:16 p.m.16 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

6.5CVSS0.00169EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/02/13 12:00 a.m.8 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

5.5AI score0.00169EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/02/13 12:00 a.m.44 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

0.00169EPSS
SaveExploits1References3
attackerkb
attackerkb
added 2026/02/13 12:00 a.m.6 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

5.5AI score0.00169EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/13 12:00 a.m.15 views

CVE-2025-70094

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

6.5CVSS5.6AI score
SaveExploits0References5
CVE
CVE
added 2026/02/13 12:00 a.m.34 views

CVE-2025-70094

OpenSourcePOS v3.4.1 contains a cross-site scripting (XSS) vulnerability within the Generate Item Barcode function. The root cause is insufficient input validation of the Item Category parameter, which enables an attacker to inject a crafted payload to execute arbitrary web scripts or HTML . Whil...

5.5AI score0.00169EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/13 12:00 a.m.18 views

PT-2026-7996

A cross-site scripting XSS vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Category parameter...

6.5CVSS5.5AI score0.00169EPSS
SaveExploits1References4
Rows per page
Query Builder