CVE-2022-40293

The application was vulnerable to a session fixation that could be used hijack accounts.

Score

CVSS 3.1 9.8 Critical

Status

Modified - vdp@themissinglink.com.au

Published

2022-10-31

Last modified

2025-05-06

Weaknesses

CWE-384

Affected products

• Php Point Of Sale (Php Point Of Sale Llc)
• Php Point Of Sale (Phppointofsale)

References

• https://www.themissinglink.com.au/security-advisories/cve-2022-40293