Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/10/07 11:13 p.m.2 views

CVE-2025-56382

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1CVSS5.8AI score0.00218EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/06 6:31 p.m.4 views

EUVD-2025-32559

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1CVSS5.3AI score0.00218EPSS
Exploits0References3
NVD
NVD
added 2025/10/06 6:15 p.m.2 views

CVE-2025-56382

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1CVSS0.00218EPSS
Exploits0References2
CVE
CVE
added 2025/10/06 12:0 a.m.12 views

CVE-2025-56382

The CVE-2025-56382 entry describes a stored XSS in LionCoders SalePro POS 5.4.8, specifically in the Customer Management Module. An authenticated user can inject script or HTML via the 'Customer Name' field when creating or editing a customer profile. The input is not properly sanitized before st...

6.1CVSS5.4AI score0.00218EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/06 12:0 a.m.2 views

CVE-2025-56382

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

5.4AI score0.00218EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/22 1:32 a.m.9 views

CVE-2025-10776 LionCoders SalePro POS Login cleartext transmission

A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the component Login. Performing manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The attack is considered to have high...

6.3CVSS0.00226EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.2 views

LionCoders SalePro POS 安全漏洞

LionCoders SalePro POS is a point-of-sale system and inventory management software from LionCoders Bangladesh. A security vulnerability exists in LionCoders SalePro POS version 5.5.0 and prior versions, which stems from mishandling of the login component and could result in the transmission of...

6.3CVSS4.6AI score0.00226EPSS
Exploits0References5
Rows per page
Query Builder