| Summary | HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters. |
|---|---|
| Publication Date | April 22, 2026, 1:16 a.m. |
| Registration Date | April 25, 2026, 4:03 a.m. |
| Last Update | April 22, 2026, 1:20 a.m. |