CVE-2025-10028: itsourcecode POS Point of Sale System 6776.php cross site scripting
A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This affects an unknown part of the file /inventory/main/vendors/datatables/unittesting/templates/6776.php. Such manipulation of the argument scripts leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10028?
CVE-2025-10028 is a cross-site scripting vulnerability that can potentially be exploited to execute malicious scripts in the user's browser.
How do I fix CVE-2025-10028?
To fix CVE-2025-10028, you should sanitize and validate user inputs in the affected file /inventory/main/vendors/datatables/unit_testing/templates/6776.php.
What versions of itsourcecode POS Point of Sale System are affected by CVE-2025-10028?
CVE-2025-10028 affects version 1.0 of itsourcecode POS Point of Sale System.
How can CVE-2025-10028 be exploited?
CVE-2025-10028 can be exploited by manipulating arguments in the affected PHP file to inject malicious JavaScript code.
What are the potential impacts of CVE-2025-10028 on the system?
The potential impacts of CVE-2025-10028 include unauthorized access to sensitive user information and control over user sessions through executed scripts.