Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2025/10/07 11:13 p.m.•16 views

CVE-2025-56382

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1CVSS5.8AI score0.00239EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/06 6:31 p.m.•17 views

EUVD-2025-32559

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1CVSS5.3AI score0.00239EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/06 6:15 p.m.•20 views

CVE-2025-56382

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1CVSS0.00239EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/06 12:00 a.m.•10 views

CVE-2025-56382

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1AI score0.00239EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•11 views

CVE-2025-56382: Improper Neutralization of Input During Web Page Generation

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1CVSS6.1AI score0.00239EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/06 12:00 a.m.•55 views

CVE-2025-56382

A stored Cross-site scripting (XSS) vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8 . An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter during the creation or editing of customer profiles. The root cause is t...

6.1CVSS6.1AI score0.00239EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•20 views

LionCoders SalePro POS security vulnerability

LionCoders SalePro POS is a point-of-sale system and inventory management software from LionCoders Bangladesh. A security vulnerability exists in LionCoders SalePro POS version 5.4.8, which stems from improper cleanup of the customer name parameter and could lead to a stored cross-site scripting...

6.1CVSS5.9AI score0.00239EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-30389

Malicious code in bioql PyPI...

6.3CVSS4.8AI score0.00253EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/09/22 1:32 a.m.•13 views

CVE-2025-10776 LionCoders SalePro POS Login cleartext transmission

A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the component Login. Performing manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The attack is considered to have high...

6.3CVSS4.4AI score0.00253EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/09/22 1:32 a.m.•35 views

CVE-2025-10776 LionCoders SalePro POS Login cleartext transmission

A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the component Login. Performing manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The attack is considered to have high...

6.3CVSS0.00253EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•19 views

PT-2025-38675

Name of the Vulnerable Software and Affected Versions LionCoders SalePro POS versions prior to 5.5.1 Description A security issue exists in LionCoders SalePro POS that involves the cleartext transmission of sensitive information during some unknown processing related to the Login component. This...

6.3CVSS4AI score0.00253EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•12 views

CVE-2025-10776: Cleartext Transmission of Sensitive Information

A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the component Login. Performing manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The attack is considered to have high...

6.3CVSS4.4AI score0.00253EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•22 views

LionCoders SalePro POS security vulnerability

LionCoders SalePro POS is a point-of-sale system and inventory management software from LionCoders Bangladesh. A security vulnerability exists in LionCoders SalePro POS version 5.5.0 and prior versions, which stems from mishandling of the login component and could result in the transmission of...

6.3CVSS4.6AI score0.00253EPSS
SaveExploits0References5
Rows per page
Query Builder