CVE-2021-41492: Simple Cashiering System Project Simple Cashiering System

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0 via the (1) Product Code in the pos page in cashiering. (2) id parameter in manage_products and the (3) t paramater in actions.php.

Affected products

• Simple Cashiering System Project Simple Cashiering System: version 1.0 only

Published 2021-11-03. Last modified 2026-06-17.