CVE-2022-40291

The CVE-2022-40291 issue affects PHP Point of Sale version 19.0, where a Cross-Site Request Forgery (CSRF) weakness can coerce users into deleting their accounts or, rarely, hijacking accounts and creating additional admin accounts. Root cause: CSRF vulnerability enabling unauthorized state-chang...

CVE-2022-40291 Cross-site request forgery (CSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC

The application was vulnerable to Cross-Site Request Forgery CSRF attacks, allowing an attacker to coerce users into sending malicious requests to the site to delete their account, or in rare circumstances, hijack their account and create other admin accounts...