TI-2025-35474 CVE-2025-57204 · GHSA-q7jf-phpc-j8cfStocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored…Priority MEDIUM 58Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability within the Products module available to authenticated users.CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00259 · Published 2025-09-22 · No fix listed CWE-79