PHP Point of Sale LLC PHP Point of Sale

• CVE-2022-40294 High 8.8 CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC 0.9%
• CVE-2022-40290 Medium 6.1 Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 0.5%
• CVE-2022-40295 Unrated Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 0.5%
• CVE-2022-40287 Critical 9.0 Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via user profile data fields. 0.8%
• CVE-2022-40296 Critical 9.8 Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 0.8%
• CVE-2022-40289 Critical 9.0 Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality. 0.7%
• CVE-2022-40292 Medium 5.3 Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 0.6%
• CVE-2022-40291 High 8.8 Cross-site request forgery (CSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC 0.3%
• CVE-2022-40293 Critical 9.8 Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 0.8%
• CVE-2022-40288 Critical 9.0 Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via messaging functionality 0.8%