CVE-2025-66924 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web scri…
Medium CVSS: 6.1

CVE-2025-66924

A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "name" parameter.
Vendor
Opensourcepos
Product
Open Source Point Of Sale
CWE
CWE-79
Yayın Tarihi
2025-12-17 18:15:49
Güncelleme
2025-12-18 19:52:51
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-79 Open Source Point Of Sale MEDIUM Opensourcepos 2025

Referanslar

https://github.com/omkaryepre/vulnerability-research/blob/main/CVE-2025-66924/readme.md https://github.com/opensourcepos/opensourcepos https://github.com/omkaryepre/vulnerability-research/blob/main/CVE-2025-66924/readme.md