opensourcepos

Products

Product	CVEs	Exploited	Latest
opensourcepos	7	–	Apr 7, 2026
Open Source Point of Sale	3	–	Aug 15, 2026

CVE-2026-19895 Low 3.7 opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication 0.6%
CVE-2026-8803 Low 3.7 opensourcepos Open Source Point of Sale Employee Login Employee.php login weak hash 0.2%
CVE-2026-8802 Medium 4.3 opensourcepos Open Source Point of Sale Items.php getPicThumb path traversal 0.4%
CVE-2026-32712 Medium 5.4 Open Source Point of Sale has Stored XSS in Customer Name (Sales) 0.2%
CVE-2026-39380 Medium 5.4 Open Source Point of Sale has Stored XSS in Stock Location (Configuration) 0.2%
CVE-2026-33730 Medium 6.5 Open Source Point of Sale has an IDOR in Password Change (Home) 0.3%
CVE-2026-32888 High 8.8 Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionality 0.3%
CVE-2025-68658 Medium 4.3 Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field 0.2%
CVE-2025-68434 High 8.8 opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation 0.3%
CVE-2025-68147 High 8.1 opensourcepos has a Cross-site Scripting vulnerability 0.4%