2026-02-13 00:00:00
mitre
PUBLISHED
An issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a crafted AJAX response.