Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Open Source Point Of Sale MEDIUM 5.4
CVE-2026-32712

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Sc…

Fix: 3.4.3+
Fix from $1,600 2026-04-07
Open Source Point Of Sale MEDIUM 5.4
CVE-2026-39380

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Prior to 3.4.3, a Stored Cross-Site Sc…

Fix: 3.4.3+
Fix from $1,600 2026-04-07
Open Source Point Of Sale MEDIUM 6.5
CVE-2026-33730

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Prior to version 3.4.2…

Fix: 3.4.2+
Fix from $1,600 2026-03-27
Open Source Point Of Sale HIGH 8.8
CVE-2026-32888

Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. Versions contain an SQL Injection in t…

Fix: after 3.4.2
Fix from $1,950 2026-03-20
Open Source Point Of Sale HIGH 8.8
CVE-2026-26746

OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function. An attacker can read arbitrary files…

No fix yet
Fix from $1,950 2026-02-20
Open Source Point Of Sale MEDIUM 5.3
CVE-2026-26745

OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currency_symbol configuration field. Although the input is …

No fix yet
Fix from $1,600 2026-02-20
Open Source Point Of Sale MEDIUM 6.5
CVE-2025-70095

A cross-site scripting (XSS) vulnerability in the item management and sales invoice function of OpenSourcePOS v3.4.1 allows attackers to execute arbi…

No fix yet
Fix from $1,600 2026-02-13
Open Source Point Of Sale HIGH 7.4
CVE-2025-70093

An issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a crafted AJAX response.

Patch available
Fix from $1,950 2026-02-13
Open Source Point Of Sale MEDIUM 6.5
CVE-2025-70091

A cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTM…

No fix yet
Fix from $1,600 2026-02-13
Open Source Point Of Sale MEDIUM 6.5
CVE-2025-70094

A cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web sc…

Patch available
Fix from $1,600 2026-02-13
Open Source Point Of Sale MEDIUM 5.5
CVE-2025-70092

A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTM…

No fix yet
Fix from $1,600 2026-02-12
Open Source Point Of Sale HIGH 8.8
CVE-2025-68434

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.…

Fix: 3.4.2+
Fix from $1,950 2025-12-17
Open Source Point Of Sale HIGH 8.1
CVE-2025-68147

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.…

Fix: 3.4.2+
Fix from $1,950 2025-12-17
Open Source Point Of Sale MEDIUM 6.1
CVE-2025-66924

A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitra…

No fix yet
Fix from $1,600 2025-12-17
Open Source Point Of Sale HIGH 7.2
CVE-2025-66923

A Cross-site scripting (XSS) vulnerability in Create/Update Customer(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitra…

No fix yet
Fix from $1,950 2025-12-17
Open Source Point Of Sale HIGH 7.2
CVE-2025-66921

A Cross-site scripting (XSS) vulnerability in Create/Update Item(s) Module in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbi…

No fix yet
Fix from $1,950 2025-12-17
Open Source Point Of Sale HIGH 7.5
CVE-2025-63800

The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due to missing server-s…

No fix yet
Fix from $1,950 2025-11-18
Open Source Point Of Sale HIGH 7.2
CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page.

No fix yet
Fix from $1,950 2022-07-28