https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 04:10:45 +0000 https://db.gcve.eu/vuln/fkie_cve-2025-41011 <p>HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim&#39;s browser due to a lack of proper validation of user input by sending a request to &#39;/reports/generate/specific_customer&#39;, ussing &#39;start_date_formatted&#39; y &#39;end_date_formatted&#39; parameters.</p> <p>HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim&#39;s browser due to a lack of proper validation of user input by sending a request to &#39;/reports/generate/specific_customer&#39;, ussing &#39;start_date_formatted&#39; y &#39;end_date_formatted&#39; parameters.</p> https://db.gcve.eu/vuln/fkie_cve-2025-41011 https://db.gcve.eu/vuln/ghsa-29vm-h87p-hcp4 <p>HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim&#39;s browser due to a lack of proper validation of user input by sending a request to &#39;/reports/generate/specific_customer&#39;, ussing &#39;start_date_formatted&#39; y &#39;end_date_formatted&#39; parameters.</p> <p>HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim&#39;s browser due to a lack of proper validation of user input by sending a request to &#39;/reports/generate/specific_customer&#39;, ussing &#39;start_date_formatted&#39; y &#39;end_date_formatted&#39; parameters.</p> https://db.gcve.eu/vuln/ghsa-29vm-h87p-hcp4