PT-2026-5554 · Unknown · Ultimatepos
CVE-2021-47908
·
Publicado
2026-02-01
·
Atualizado
2026-02-01
CVSS v3.1
6.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Ultimate POS version 4.4
Description
Ultimate POS version 4.4 is affected by a persistent cross-site scripting issue. Remote attackers can inject malicious scripts through the
product name parameter. This can be exploited via product add or edit functions, potentially allowing execution of arbitrary JavaScript and hijacking of user sessions.Recommendations
Apply any available updates or patches for Ultimate POS version 4.4. As a temporary workaround, sanitize the
product name parameter to prevent the injection of malicious scripts.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ultimatepos