CVE-2025-67263

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these fields, which, persisted in the database.

• CWE-79

• https://packetstorm.news/files/id/214045/Third Party Advisory
• https://www.abacre.com/retailpointofsale/Product

Published

Jan 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67254NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Direct…7.5
• CVE-2025-67255In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameter…8.8
• CVE-2025-67259A Broken Access Control vulnerability exists in ClassroomIO …6.5
• CVE-2025-6726The Block Editor Gallery Slider plugin for WordPress is vuln…4.3
• CVE-2025-67260The Terrapack software, from ASTER TEC / ASTER S.p.A., with …8.8
• CVE-2025-67261Abacre Retail Point of Sale 14.0.0.396 is vulnerable to cont…6.5
• CVE-2025-67264An OS command injection vulnerability in the com.sprd.engine…7.8
• CVE-2025-67268gpsd before commit dc966aa contains a heap-based out-of-boun…9.8
• CVE-2025-67269An integer underflow vulnerability exists in the `nextstate(…7.5
• CVE-2025-67274An issue in continuous.software aangine v.2025.2 allows a re…7.5
• CVE-2025-67278An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW befor…6.5
• CVE-2025-67279An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW befor…5.3