Sourcecodester Simple Pos And Inventory System vulnerabilities

4 CVEs affecting Sourcecodester Simple Pos And Inventory System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9447, published 2026-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-9447, published 2026-05-25. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Simple POS and Inventory System 1.0. The impacted element is an unknown function of the file /user/search.php. Performing a manipulation of the argument…
CVE-2026-9445, published 2026-05-25. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw has been found in SourceCodester Simple POS and Inventory System 1.0. Impacted is an unknown function of the file /admin/addproduct.php of the component File Extension Handler. This…
CVE-2026-9446, published 2026-05-25. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been found in SourceCodester Simple POS and Inventory System 1.0. The affected element is an unknown function of the file /admin/edit_customer.php. Such manipulation of the…
CVE-2026-9444, published 2026-05-25. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function delete of the file /admin/deleteproduct.php of the component GET Parameter Handler.…