Skip to content

Opensourcepos vulnerabilities

Products

Newest

opensourcepos open source point of sale opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication CVE-2026-19895 6.3 MediumAugust 15, 2026
opensourcepos open source point of sale opensourcepos Open Source Point of Sale Employee Login Employee.php login weak hash CVE-2026-8803 Disputed 6.3 MediumMay 18, 2026
opensourcepos open source point of sale opensourcepos Open Source Point of Sale Items.php getPicThumb path traversal CVE-2026-8802 5.3 MediumMay 18, 2026
opensourcepos open source point of sale, opensourcepos +1 more Open Source Point of Sale has Stored XSS in Customer Name (Sales) CVE-2026-32712 5.4 MediumApril 7, 2026
opensourcepos open source point of sale, opensourcepos +1 more Open Source Point of Sale has Stored XSS in Stock Location (Configuration) CVE-2026-39380 5.4 MediumApril 7, 2026
opensourcepos open source point of sale, opensourcepos +1 more Open Source Point of Sale has an IDOR in Password Change (Home) CVE-2026-33730 6.5 MediumMarch 27, 2026
opensourcepos open source point of sale, opensourcepos +1 more Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionality CVE-2026-32888 8.8 HighMarch 20, 2026
opensourcepos open source point of sale OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php:... CVE-2026-26746 Public exploit 8.8 HighFebruary 20, 2026
opensourcepos open source point of sale OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the... CVE-2026-26745 5.3 MediumFebruary 20, 2026
opensourcepos open source point of sale A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of... CVE-2025-70095 6.5 MediumFebruary 13, 2026
opensourcepos open source point of sale A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS... CVE-2025-70094 6.5 MediumFebruary 13, 2026
opensourcepos open source point of sale An issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a... CVE-2025-70093 7.4 HighFebruary 13, 2026
opensourcepos open source point of sale A cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1... CVE-2025-70091 6.5 MediumFebruary 13, 2026
opensourcepos open source point of sale A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1... CVE-2025-70092 5.5 MediumFebruary 12, 2026
opensourcepos open source point of sale, opensourcepos +1 more Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field CVE-2025-68658 4.3 MediumJanuary 13, 2026
opensourcepos open source point of sale, opensourcepos +1 more opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation CVE-2025-68434 Public exploit 8.8 HighDecember 17, 2025
opensourcepos open source point of sale, opensourcepos +1 more opensourcepos has a Cross-site Scripting vulnerability CVE-2025-68147 Public exploit 8.1 HighDecember 17, 2025
opensourcepos open source point of sale A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of... CVE-2025-66924 6.1 MediumDecember 17, 2025
opensourcepos open source point of sale A Cross-site scripting (XSS) vulnerability in Create/Update Customer(s) in Open Source Point of... CVE-2025-66923 7.2 HighDecember 17, 2025
opensourcepos open source point of sale A Cross-site scripting (XSS) vulnerability in Create/Update Item(s) Module in Open Source Point... CVE-2025-66921 7.2 HighDecember 17, 2025
opensourcepos open source point of sale The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account... CVE-2025-63800 7.5 HighNovember 18, 2025
opensourcepos open source point of sale Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability... CVE-2022-34578 7.2 HighJuly 28, 2022