CVE-2025-41011

HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specificcustomer', ussing 'startdateformatted' y 'enddateformatted'...

CVE-2025-41011

CVE-2025-41011 — HTML injection in PHP Point of Sale v19.4 due to insufficient input validation in the /reports/generate/specific_customer endpoint (parameters: start_date_formatted, end_date_formatted). This allows rendering HTML in the victim’s browser. CVSS 4.0: Attack vector NETWORK; attack c...

CVE-2025-41011 HTML injection in PHP Point Of Sale

HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specificcustomer', ussing 'startdateformatted' y 'enddateformatted'...

CVE-2025-41011 HTML injection in PHP Point Of Sale

HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specificcustomer', ussing 'startdateformatted' y 'enddateformatted'...

.NET 10.0 Update - April 21, 2026

None None...

CVE-2019-25668

creationtimestamp| type| source ---|---|--- 2026-04-21 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjyx2k5z5e2h...

CVE-2026-25775

creationtimestamp| type| source ---|---|--- 2026-04-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12 2026-04-24 01:17:38+00:00| seen| Telegram/y1cMF7MSs4iKIz6Tjc1sXNbleG9GlRmZjivyp4DyaM6b6bo 2026-04-24 01:30:28+00:00| seen|...

GHSA-2783-WXMM-WMWR

creationtimestamp| type| source ---|---|--- 2026-04-21 03:18:08+00:00| seen| Telegram/y8A40ypWR-zTQL04UvuWU-fhawBkUz4Q7ssav8OQJXhAoc...

GHSA-GFC2-9QMW-W7VH

creationtimestamp| type| source ---|---|--- 2026-04-21 01:18:26+00:00| published-proof-of-concept| Telegram/Ww620GgPpyXrrMPbpNwPksYQUctI-RNYBJrVLxtJIutZ-I...

GHSA-M6RX-7PVW-2F73

creationtimestamp| type| source ---|---|--- 2026-04-21 01:18:26+00:00| published-proof-of-concept| Telegram/Ww620GgPpyXrrMPbpNwPksYQUctI-RNYBJrVLxtJIutZ-I...

CVE-2026-41302

creationtimestamp| type| source ---|---|--- 2026-04-21 00:54:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxrhxdl5w2z 2026-04-21 01:18:48+00:00| seen| Telegram/wz0kiY1tb5u805P38ZVeawoTKuvhTd24bOWQm-Bt9SZek-4...

PT-2026-33990

Name of the Vulnerable Software and Affected Versions PHP Point of Sale version 19.4 Description An issue exists where a lack of proper validation of user input allows an attacker to render HTML in the victim's browser. This occurs when sending a request to the endpoint '/reports/generate/specifi...

PHP Point of Sale 跨站脚本漏洞

PHP Point of Sale is an online sales point system for small retail businesses managed by PHP Point of Sale Inc. Version PHP Point of Sale v19.4 contains a cross-site scripting vulnerability. This vulnerability stems from insufficient input validation of the startdateformatted and enddateformatted...

CVE-2026-32311

creationtimestamp| type| source ---|---|--- 2026-04-20 21:22:08+00:00| seen| Telegram/afpqx5U4BmLApg0vDDGxSmW2u1LMTzTENI3LCYVeeaEOYCo 2026-04-21 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjxohmhwtl2l...

GHSA-6W96-9QW7-M599

creationtimestamp| type| source ---|---|--- 2026-04-20 21:22:08+00:00| seen| Telegram/afpqx5U4BmLApg0vDDGxSmW2u1LMTzTENI3LCYVeeaEOYCo...

GHSA-FG79-CR9C-7369

creationtimestamp| type| source ---|---|--- 2026-04-20 21:21:58+00:00| seen| Telegram/itZIvBa41gHmxLOZ4e3ooVdAvJm4yIE4KZd9P4HVJMq4o...

CVE-2026-26943

creationtimestamp| type| source ---|---|--- 2026-04-20 21:21:58+00:00| seen| Telegram/itZIvBa41gHmxLOZ4e3ooVdAvJm4yIE4KZd9P4HVJMq4o...

RHSA-2025:9922

creationtimestamp| type| source ---|---|--- 2026-04-20 21:21:38+00:00| seen| Telegram/4zRGsEPwCWPOVkiJwGYn1RsXuEnREKMT0DdgACfDkyyoA...

GHSA-HX6P-XPX3-JVVV

creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:56+00:00| published-proof-of-concept| Telegram/lEx4szWN0qGJp6nrTUnjGPs2FeG4zgfzAhM3YBb6L1MKYlY...

CVE-2026-6662

creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:56+00:00| published-proof-of-concept| Telegram/lEx4szWN0qGJp6nrTUnjGPs2FeG4zgfzAhM3YBb6L1MKYlY 2026-04-20 19:53:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxangjizy2i...