MINI-6C34-43R7-QJR8

Bulletin has no description...

MINI-Q72R-F4W5-QQ3V

Bulletin has no description...

MINI-M2M4-8G78-J47H

Bulletin has no description...

MINI-PH9H-965Q-9PXR

Bulletin has no description...

MINI-R82W-2RFJ-C6HM

Bulletin has no description...

MINI-CFQ4-3428-4M5V

Bulletin has no description...

MINI-V5HX-5HR8-H2P2

Bulletin has no description...

MINI-PFC7-WMPP-CFMC

Bulletin has no description...

MINI-J5XW-WR55-Q6GJ

Bulletin has no description...

MINI-J7R7-629G-5WH5

Bulletin has no description...

MINI-398C-HF5H-JM3G

Bulletin has no description...

MINI-556J-X46M-7257

Bulletin has no description...

MINI-VFQR-PR92-2373

Bulletin has no description...

MINI-P53M-MP8V-5M3V

Bulletin has no description...

CVE-2026-42839

An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the itemname, description, or image fields of an Item and trigger unescaped rendering in the Point of Sale POS cart interface for every operator who adds that item to a transaction.This issue...

CVE-2026-42839

CVE-2026-42839 describes a stored XSS in ERPNext 16.16.0. An authenticated user with Item record edit permissions can persist arbitrary HTML/JavaScript in item_name, description, or image fields, causing unescaped rendering in the POS cart interface for every operator adding that item to a transa...

CVE-2026-42839 ERPNext 16.16.0 - Stored XSS in POS cart item rendering

An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the itemname, description, or image fields of an Item and trigger unescaped rendering in the Point of Sale POS cart interface for every operator who adds that item to a transaction.This issue...

CVE-2026-42839

An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the itemname, description, or image fields of an Item and trigger unescaped rendering in the Point of Sale POS cart interface for every operator who adds that item to a transaction.This issue...

CVE-2026-42839 ERPNext 16.16.0 - Stored XSS in POS cart item rendering

An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the itemname, description, or image fields of an Item and trigger unescaped rendering in the Point of Sale POS cart interface for every operator who adds that item to a transaction.This issue...

CVE-2026-42839 ERPNext 16.16.0 - Stored XSS in POS cart item rendering

An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the itemname, description, or image fields of an Item and trigger unescaped rendering in the Point of Sale POS cart interface for every operator who adds that item to a transaction.This issue...