CVE-2022-40293: Phppointofsale PHP Point Of Sale

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The application was vulnerable to a session fixation that could be used hijack accounts.

Affected products

• Phppointofsale PHP Point Of Sale: version 19.0 only

Published 2022-10-31. Last modified 2026-06-17.