CVE-2025-70092 PUBLISHED

Assigner: mitre
Reserved: 09.01.2026 Published: 12.02.2026 Updated: 12.02.2026

A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Item Name parameter.

Product Status

Vendor n/a
Product n/a
Versions
  • Version n/a is affected

References

Problem Types

  • n/a text