Home
Feed

Extend

Hashnode Pro
Hashnode for Agents

Resources

The foreword
Hashnode gql skill

Buildful - AI coding agent that delivers frontier-level results at a fraction of the cost Bug0 - The AI-native e2e QA regression testing Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Search Hashnode

Search posts, tags, users, and pages

Discussion on "CVE-2025-57204: Stored XSS in Stocky POS with Inventory Management & HRM (ui-lib) 5.0" | Hashnode

Feed/

Discussion

Sergio Medeiros

Vulnerability Operations @ Synack. InfoSec's Village Idiot. Documenting my journey of pivoting out of a decade long sales career to breaking

Sep 20, 2025

CVE-2025-57204: Stored XSS in Stocky POS with Inventory Management & HRM (ui-lib) 5.0

Discovered by: Michael KimVendor: ui-lib (Uilibrary)Product: Stocky – POS with Inventory Management & HRM (“Ultimate Inventory Management System with POS”)Affected Version: 5.0 (as released June 2025)Impact: Arbitrary JavaScript Execution (Stored XSS...

grumpz.net4 min read

#cve #cybersecurity-1 #cybersecurity #cybersec #hacking #php #xss #owasp #pentesting #penetration-testing #ethicalhacking #information-security #devops #developer #devops-articles

Responses1

Markdown supported · ⌘↵ to post

Sonu Goswami

Sonu Goswami | B2B SaaS Positioning Specialist

Sep 21, 2025

Thanks for sharing......this is a thorough and clear breakdown of the XSS risk in Stocky POS. Very valuable info for security teams.