Critical severity9.0NVD Advisory· Published Oct 31, 2022· Updated Jun 17, 2026
CVE-2022-40289
CVE-2022-40289
Description
The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to escalate privileges or compromise any accounts they can coerce into observing the targeted files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- PHP Point of Sale LLC/PHP Point of Salev5Range: 0
Patches
Vulnerability mechanics
References
1- www.themissinglink.com.au/security-advisories/cve-2022-40289nvdVendor Advisory
News mentions
0No linked articles in our index yet.