CVE-2022-40294High 8.8CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC0.9%
CVE-2022-40290Medium 6.1Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.0.5%
CVE-2022-40295UnratedAuthenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.0.5%
CVE-2022-40287Critical 9.0Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via user profile data fields.0.8%
CVE-2022-40296Critical 9.8Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.0.8%
CVE-2022-40289Critical 9.0Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality.0.7%
CVE-2022-40292Medium 5.3Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.0.6%
CVE-2022-40291High 8.8Cross-site request forgery (CSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC0.3%
CVE-2022-40293Critical 9.8Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.0.8%
CVE-2022-40288Critical 9.0Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via messaging functionality0.8%