CVE-2022-40295: Phppointofsale PHP Point Of Sale

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.

Affected products

Published 2022-10-31. Last modified 2026-06-17.