CVE-2023-36347: Codekop

High severity, CVSS 7.5. EPSS: 34.1% chance of exploitation in the next 30 days.

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.

Affected products

• Codekop Codekop: version 2.0 only

Published 2023-06-30. Last modified 2026-06-17.