CVE-2022-34578

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2022-07-28

Last modified

2024-08-03

Weaknesses

CWE-434

Affected products

• Open Source Point Of Sale (Opensourcepos)

References

• https://grimthereaperteam.medium.com/open-source-point-of-sale-v3-3-7-file-upload-cross-site-scripting-4900d717b2c3