critical9.0
CVE-2022-40287
The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messaging functionality, leading to privilege…
Impact
The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messaging functionality, leading to privilege escalation or a compromise of a targeted account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phppointofsale | Php Point Of Sale | Version 19.0 |