← Database

CVE-2022-40289

CRITICAL CVSS: 9.0 Published: 2022-10-31 Modified: 2026-06-17

Description

The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to escalate privileges or compromise any accounts they can coerce into observing the targeted files.

Affected Platforms

Phppointofsale Php Point Of Sale

Weakness Type

CWE-79, CWE-79, CWE-79

References