What is CVE-2022-40291?

CVE-2022-40291 is a high-severity vulnerability in Phppointofsale Php_point_of_sale, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2022-10-31.

How severe is CVE-2022-40291?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Phppointofsale Php_point_of_sale

CVE-2022-40291

The application was vulnerable to Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to coerce users into sending malicious requests to the site to delete their account, or in rare circumstances, hijack their account and crea…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.003 (21.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Phppointofsale Php_point_of_sale — versions 19.0
Php Point Of Sale Llc — versions 0

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

vdp@themissinglink.com.au (Third Party Advisory)

Frequently asked questions

What is CVE-2022-40291?: CVE-2022-40291 is a high-severity vulnerability in Phppointofsale Php_point_of_sale, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2022-10-31.
How severe is CVE-2022-40291?: High severity. CVSS v3 base score is 8.8 out of 10.