CVE-2025-60503

CVE-2025-60503 — Gespeichertes Cross-Site-Scripting XSS in UltimatePOS UltimateFosters v4.8 Veröffentlichungsdatum: 2025-10-30 CVE-ID: CVE-2025-60503 RESERVIERT Sicherheitsforscher: Vivien Lebas Hersteller: UltimateFosters Produkt: UltimatePOS Betroffene Version: 4.8 Schwachstellentyp:...

CVE-2026-42877

FacturaScripts is an open source accounting and invoicing software. In 2025.92 and earlier, a stored Cross-Site Scripting XSS vulnerability exists in the product search modal of sales Core/Lib/AjaxForms/SalesModalHTML.php and purchases documents Core/Lib/AjaxForms/PurchasesModalHTML.php. An...