critical9.0
CVE-2022-40289
The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to esca…
Impact
The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to escalate privileges or compromise any accounts they can coerce into observing the targeted files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phppointofsale | Php Point Of Sale | Version 19.0 |