← Back

Abacre

abacre

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Abacre
1Retail Point Of Sale
Jun 17, 2026
Jan 20, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname...Show more
Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these fields, which, persisted in the database.Show less
1Abacre
1Retail Point Of Sale
Jun 17, 2026
Jan 20, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page.
1Abacre
1Restaurant Point Of Sale
Jun 17, 2026
Dec 3, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activatio...Show more
Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt.Show less