CVE-2025-10064: itsourcecode POS Point of Sale System dom_data_two_headers.php cross site scripting

Published Sep 7, 2025

Updated

A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This issue affects some unknown processing of the file /inventory/main/vendors/datatables/unittesting/templates/domdatatwoheaders.php. The manipulation of the argument scripts results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

itsourcecode POS Point of Sale System

Facebook-kimmymatillano Point Of Sale System=1.0

Event History

Sep 7, 2025

CVE Published

via MITRE·12:02 AM

Data Sourced

via MITRE·12:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10064?

CVE-2025-10064 has been rated as a high severity vulnerability due to its potential impact on cross-site scripting.

Which systems are affected by CVE-2025-10064?

CVE-2025-10064 affects itsourcecode POS Point of Sale System version 1.0.

How do I fix CVE-2025-10064?

To fix CVE-2025-10064, it is recommended to sanitize user input and implement proper output encoding in the affected file.

What type of vulnerability is CVE-2025-10064?

CVE-2025-10064 is a cross-site scripting (XSS) vulnerability.

What file is involved in CVE-2025-10064?

CVE-2025-10064 involves the file /inventory/main/vendors/datatables/unit_testing/templates/dom_data_two_headers.php.