Vulnerabilities

TI-2025-41172 CVE-2025-67263 · GHSA-47vw-q2cv-jhr7

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS)…

MEDIUM 60

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.002 Published 2026-01-20 No fix listed CWE-79

TI-2025-41171 CVE-2025-67261 · GHSA-44vh-63c5-9hxh

LOW 34

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00213 Published 2026-01-20 No fix listed CWE-89

TI-2025-40327 CVE-2025-65320 · GHSA-xv99-45r3-4mjg

LOW 32

Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2025-12-03 No fix listed CWE-312