CVE-2025-10027: itsourcecode POS Point of Sale System 2512.php cross site scripting

Published Sep 5, 2025

Updated

A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected Software

2 affected components

itsourcecode POS Point of Sale System

Facebook-kimmymatillano Point Of Sale System=1.0

Event History

Sep 5, 2025

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10027?

CVE-2025-10027 is classified as a high severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2025-10027?

To mitigate CVE-2025-10027, ensure proper input validation and sanitization in the affected /inventory/main/vendors/datatables/unit_testing/templates/2512.php file.

What systems are affected by CVE-2025-10027?

CVE-2025-10027 affects itsourcecode POS Point of Sale System version 1.0.

What type of vulnerability is CVE-2025-10027?

CVE-2025-10027 is a cross-site scripting (XSS) vulnerability.

Can CVE-2025-10027 be exploited remotely?

Yes, CVE-2025-10027 can be exploited remotely by an attacker if they can manipulate the scripts argument.