Ultimatefosters Ultimatepos
3 CVEs affecting Ultimatefosters Ultimatepos. Latest disclosed: 2025-11-03. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17139 | High | 8.8 | 2018-09-17 | UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with… |
CVE-2025-60503 | High | 8.7 | 2025-11-03 | A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase func… |
CVE-2025-40980 | | 2025-07-31 | A Stored Cross Site Scripting vulnerability has been found in UltimatePOS by UltimateFosters. This vulnerability is due to the lack of proper validation of use… |