CVE-2025-41011
EUVD-2025-20954321.04.2026, 16:16
HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| phppointofsale | php_point_of_sale | 19.4 |
𝑥
= Vulnerable software versions