opensourcepos vulnerabilities
10 published CVEs name opensourcepos among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-19895
opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication
opensourcepos · Open Source Point of Sale
Medium6.3 - CVE-2026-8803
opensourcepos Open Source Point of Sale Employee Login Employee.php login weak hash
opensourcepos · Open Source Point of Sale
Medium6.3 - CVE-2026-8802
opensourcepos Open Source Point of Sale Items.php getPicThumb path traversal
opensourcepos · Open Source Point of Sale
Medium5.3 - CVE-2026-32712
Open Source Point of Sale has Stored XSS in Customer Name (Sales)
opensourcepos · opensourcepos
Medium5.4 - CVE-2026-39380
Open Source Point of Sale has Stored XSS in Stock Location (Configuration)
opensourcepos · opensourcepos
Medium5.4 - CVE-2026-33730
Open Source Point of Sale has an IDOR in Password Change (Home)
opensourcepos · opensourcepos
Medium6.5 - CVE-2026-32888
Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionality
opensourcepos · opensourcepos
High8.8 - CVE-2025-68658
Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field
opensourcepos · opensourcepos
Medium4.3 - CVE-2025-68434
opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation
opensourcepos · opensourcepos
High8.8 - CVE-2025-68147
opensourcepos has a Cross-site Scripting vulnerability
opensourcepos · opensourcepos
High8.1