Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
⚠️#INCIBEaviso | Inyección SQL en Zeon Academy Pro de #ZeonGlobalTech #CVE CVE-2025-41011 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/inyeccion-sql-en-zeon-academy-pro-de-zeon-global-tech #AvisosDeSeguridad #TI #CNA #0day
Post summary
The tweet announces a new SQL injection vulnerability (CVE‑2025‑41011) affecting Zeon Academy Pro, without providing PoC, exploit, or patch details.
⚠️#INCIBEaviso | Inyección HTML en #PHPPointOfSale #CVE CVE-2025-41011 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/inyeccion-html-en-php-point-sale-0 #AvisosDeSeguridad #TI #CNA #0day
Post summary
The tweet announces an early alert for an HTML injection vulnerability (CVE-2025-41011) in PHP Point of Sale, providing minimal technical details but no PoC, exploit, or patch information.
CVE-2025-41011 HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validati… https://www.cve.org/CVERecord?id=CVE-2025-41011
Post summary
The post announces the HTML injection flaw (CVE‑2025‑41011) in PHP Point of Sale v19.4, detailing its technical nature but offering no exploit details or mitigations.
🚨*CVE* CVE-2025-41011 HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validati… https://www.cve.org/CVERecord?id=CVE-2025-41011 ----- Traducción: CVE-2025-41011 vul… http://infoflow.cloud`
Post summary
The post announces CVE‑2025‑41011, an HTML injection flaw in PHP Point of Sale v19.4 that permits arbitrary HTML rendering, but provides no PoC, exploit, active exploitation claim, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | phppointofsale | php_point_of_sale | 19.4 | - | - |