CVE-2022-40290 — Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.

CVE-2022-40290

Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. PUBLISHED

Description (CNA)

The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode generation functionality, allowing attackers to generate an unsafe link that could compromise users.

Affected (CNA)

Vendor / product	Versions
PHP Point of Sale LLC / PHP Point of Sale	affected 0

CWE

CWE-79

References

https://www.themissinglink.com.au/security-advisories/cve-2022-40290

ADP enrichment

CVE

No English description supplied.

https://www.themissinglink.com.au/security-advisories/cve-2022-40290

CISA-ADP

No English description supplied.

No references supplied.