UL
Product
UltimatePOS
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add UltimatePOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-17139 | 8.8 | Sep 17 | UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg… Affected: 2.5 |
| CVE-2025-60503 | 8.7 | Nov 3 | A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is… Affected: 4.8 |
| CVE-2025-40980 | 5.1 | Jul 31 | A Stored Cross Site Scripting vulnerability has been found in UltimatePOS by UltimateFosters Affected: 6.4; |
Showing 3