What’s Vulnerable › Products

opensourcepos Open Source Point of Sale vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 21 published in the last 12 months.

Check whether your opensourcepos Open Source Point of Sale version is affected

Latest opensourcepos Open Source Point of Sale vulnerabilities

• CVE-2026-19895 — opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication (CVSS 3.7)
• CVE-2026-8803 — opensourcepos Open Source Point of Sale Employee Login Employee.php login weak hash (CVSS 3.7)
• CVE-2026-8802 — opensourcepos Open Source Point of Sale Items.php getPicThumb path traversal (CVSS 4.3)
• CVE-2026-32712 — Open Source Point of Sale has Stored XSS in Customer Name (Sales) (CVSS 5.4)
• CVE-2026-39380 — Open Source Point of Sale has Stored XSS in Stock Location (Configuration) (CVSS 5.4)
• CVE-2026-33730 — Open Source Point of Sale has an IDOR in Password Change (Home) (CVSS 6.5)
• CVE-2026-32888 — Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionality (CVSS 8.8)
• CVE-2026-26746 — (CVSS 8.8)
• CVE-2026-26745 — (CVSS 5.3)
• CVE-2025-70095 — (CVSS 6.5)
• CVE-2025-70094 — (CVSS 6.5)
• CVE-2025-70093 — (CVSS 7.4)
• CVE-2025-70091 — (CVSS 6.5)
• CVE-2025-70092 — (CVSS 5.5)
• CVE-2025-68658 — Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field (CVSS 4.8)
• CVE-2025-68434 — opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator Creation (CVSS 8.8)
• CVE-2025-68147 — opensourcepos has a Cross-site Scripting vulnerability (CVSS 8.1)
• CVE-2025-66924 — (CVSS 6.1)
• CVE-2025-66923 — (CVSS 7.2)
• CVE-2025-66921 — (CVSS 7.2)
• CVE-2025-63800 — (CVSS 7.5)
• CVE-2022-34578 — (CVSS 7.2)