CVE-2022-34578: Opensourcepos Open Source Point Of Sale

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

Open Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability via the Update Branding Settings page.

Affected products

• Opensourcepos Open Source Point Of Sale: version 3.3.7 only

Published 2022-07-28. Last modified 2026-06-17.