CVE-2022-40292

5.3 mediumEPSS 0.6%

Medium (5.3) in phppointofsale php point of sale. EPSS 0.6% chance of exploitation in the next 30 days.

The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the system.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-209
Published: 2022-10-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phppointofsale:php_point_of_sale

References

https://www.themissinglink.com.au/security-advisories/cve-2022-40292
https://www.themissinglink.com.au/security-advisories/cve-2022-40292

Check your stack JSON