Feed
Discussion
CVE-2025-57204: Stored XSS in Stocky POS with Inventory Management & HRM (ui-lib) 5.0
Discovered by: Michael KimVendor: ui-lib (Uilibrary)Product: Stocky – POS with Inventory Management & HRM (“Ultimate Inventory Management System with POS”)Affected Version: 5.0 (as released June 2025)Impact: Arbitrary JavaScript Execution (Stored XSS...
grumpz.net4 min read
#cve#cybersecurity-1#cybersecurity#cybersec#hacking#php#xss#owasp#pentesting#penetration-testing#ethicalhacking#information-security#devops#developer#devops-articles
Sonu Goswami
Sonu Goswami | B2B SaaS Positioning Specialist
Thanks for sharing......this is a thorough and clear breakdown of the XSS risk in Stocky POS. Very valuable info for security teams.