CVE-2025-10029: itsourcecode POS Point of Sale System complex_header_2.php cross site scripting

Published Sep 6, 2025

Updated

A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/complexheader2.php. Performing manipulation of the argument scripts results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

itsourcecode POS Point of Sale System=1.0

Facebook-kimmymatillano Point Of Sale System=1.0

Event History

Sep 6, 2025

CVE Published

via MITRE·08:32 AM

Data Sourced

via MITRE·08:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeaknessAffected Software

Feb 17, 57664

Event

via NVD·05:01 AM

Frequently Asked Questions

What is the severity of CVE-2025-10029?

CVE-2025-10029 is classified as a medium severity vulnerability affecting the itsourcecode POS Point of Sale System 1.0.

How do I fix CVE-2025-10029?

To remediate CVE-2025-10029, update the itsourcecode POS Point of Sale System to the latest version that addresses this vulnerability.

What systems are affected by CVE-2025-10029?

CVE-2025-10029 specifically affects the itsourcecode POS Point of Sale System version 1.0.

What type of vulnerability is CVE-2025-10029?

CVE-2025-10029 is a cross-site scripting (XSS) vulnerability that allows attackers to manipulate arguments in the application.

Who is the vendor of the software for CVE-2025-10029?

The vendor of the affected software for CVE-2025-10029 is itsourcecode.