The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to escalate privileges or compromise any accounts they can coerce into observing the targeted files.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
phppointofsale php point of sale 19.0 |
Vulmon