opensourcepos

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. opensourcepos has a Cross-site Scripting vulnerabilityCVE-2025-68147opensourcepos · CVSS 8.1 · 0.4% likely

   CWE-79

2. Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search FunctionalityCVE-2026-32888opensourcepos · CVSS 8.8 · 0.3% likely

   CWE-89

3. Open Source Point of Sale has an IDOR in Password Change (Home)CVE-2026-33730opensourcepos · CVSS 6.5 · 0.3% likely

   CWE-639

4. opensourcepos has Cross-Site Request Forgery vulnerability that leads to Unauthorized Administrator CreationCVE-2025-68434opensourcepos · CVSS 8.8 · 0.3% likely

   CWE-352

5. Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name fieldCVE-2025-68658opensourcepos · CVSS 4.3 · 0.2% likely

   CWE-79

6. Open Source Point of Sale has Stored XSS in Customer Name (Sales)CVE-2026-32712opensourcepos · CVSS 5.4 · 0.2% likely

   CWE-79

7. Open Source Point of Sale has Stored XSS in Stock Location (Configuration)CVE-2026-39380opensourcepos · CVSS 5.4 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.