CVE-2025-10063: itsourcecode POS Point of Sale System deferred_table.php cross site scripting

Published Sep 6, 2025

Updated

A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unittesting/templates/deferredtable.php. The manipulation of the argument scripts leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Affected Software

2 affected components

itsourcecode POS Point of Sale System

Facebook-kimmymatillano Point Of Sale System=1.0

Event History

Sep 6, 2025

CVE Published

via MITRE·11:02 PM

Data Sourced

via MITRE·11:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Aug 30, 58718

Event

via NVD·09:13 PM

Frequently Asked Questions

What is the severity of CVE-2025-10063?

CVE-2025-10063 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2025-10063?

To fix CVE-2025-10063, sanitize and validate user input in the scripts argument of the /inventory/main/vendors/datatables/unit_testing/templates/deferred_table.php file.

What impact does CVE-2025-10063 have on systems using itsourcecode POS Point of Sale System?

CVE-2025-10063 can allow attackers to perform cross-site scripting, potentially leading to data theft or session hijacking.

Is CVE-2025-10063 easy to exploit?

Yes, CVE-2025-10063 can be easily exploited if proper input validation is not implemented.

Which version of itsourcecode POS Point of Sale System is affected by CVE-2025-10063?

CVE-2025-10063 affects version 1.0 of the itsourcecode POS Point of Sale System.