Approved changes feed: RSS · Atom

cpe:2.3:a:phppointofsale:php_point_of_sale:19.4:*:*:*:*:*:*:*

part: a version: 19.4 update: *

VendorPhppointofsale (eb143190-8778-52ff-8b42-f4eea5e2c8a0)
ProductPhp Point Of Sale (cefa1d3c-89a5-5ef4-ae9a-e5a30f4d77f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41011 vulnerable 2026-06-08 07:25:06.523563 HTML injection in PHP Point Of Sale
HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters.
Published: 2026-04-21T15:15:31.708Z
Updated: 2026-04-21T16:21:50.544Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.