TI-2021-22522 CVE-2021-47908 · GHSA-p8xp-337m-35c6Ultimate POS 4.4 Persistent Cross-Site Scripting via Product NamePriority MEDIUM 56Ultimate POS 4.4 contains a persistent cross-site scripting vulnerability in the product name parameter that allows remote attackers to inject malicious scripts.CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00339 · Published 2026-02-01 · No fix listed CWE-79