CVE-2025-57204

Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in the Products module . The vulnerability is caused by insufficient input sanitization and output encoding of the product name parameter submitted to the product-creation end...