High severity8.8NVD Advisory· Published Oct 31, 2022· Updated Jun 17, 2026
CVE-2022-40294
CVE-2022-40294
Description
The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then triggered in exported data viewers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:phppointofsale:php_point_of_sale:19.0:*:*:*:*:*:*:*
- PHP Point of Sale LLC/PHP Point of Salev5Range: 19.0
Patches
Vulnerability mechanics
References
1- www.themissinglink.com.au/security-advisories/cve-2022-40294nvdThird Party Advisory
News mentions
0No linked articles in our index yet.