CVE-2025-56382 — MEDIUM (6.1)

Vulnerability Description

A stored Cross-site scripting (XSS) vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is improperly sanitized before storage and subsequent rendering, leading to script execution in the browsers of users who view the affected customer details.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Lion-Coders	Salepro Pos	5.4.8

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2025-56382?

CVE-2025-56382 is a vulnerability with a CVSS score of 6.1 (MEDIUM). A stored Cross-site scripting (XSS) vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'C...

How severe is CVE-2025-56382?

CVE-2025-56382 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-56382?

Check the references section above for vendor advisories and patch information. Affected products include: Lion-Coders Salepro Pos.