What’s Vulnerable › Products

PHP Point of Sale LLC PHP Point of Sale vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your PHP Point of Sale LLC PHP Point of Sale version is affected

Latest PHP Point of Sale LLC PHP Point of Sale vulnerabilities

• CVE-2025-41011 — HTML injection in PHP Point Of Sale (CVSS 6.1)
• CVE-2022-40296 — Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. (CVSS 9.8)
• CVE-2022-40295 — Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. (CVSS 4.9)
• CVE-2022-40294 — CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC (CVSS 8.8)
• CVE-2022-40293 — Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. (CVSS 9.8)
• CVE-2022-40292 — Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. (CVSS 5.3)
• CVE-2022-40291 — Cross-site request forgery (CSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC (CVSS 8.8)
• CVE-2022-40290 — Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. (CVSS 6.1)
• CVE-2022-40289 — Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality. (CVSS 9.0)
• CVE-2022-40288 — Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via messaging functionality (CVSS 9.0)
• CVE-2022-40287 — Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via user profile data fields. (CVSS 9.0)
• CVE-2011-3785 — (CVSS 5.0)