CVE-2022-40294 — CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC

CVE-2022-40294

CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC PUBLISHED

Description (CNA)

The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers.

Affected (CNA)

Vendor / product	Versions
PHP Point of Sale LLC / PHP Point of Sale	affected 19.0

CWE

CWE-1236

References

https://www.themissinglink.com.au/security-advisories/cve-2022-40294

ADP enrichment

CVE

No English description supplied.

https://www.themissinglink.com.au/security-advisories/cve-2022-40294

CISA-ADP

No English description supplied.

No references supplied.