CVE-2025-10065: itsourcecode POS Point of Sale System dom_data_th.php cross site scripting
A weakness has been identified in itsourcecode POS Point of Sale System 1.0. Impacted is an unknown function of the file /inventory/main/vendors/datatables/unittesting/templates/domdatath.php. This manipulation of the argument scripts causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10065?
CVE-2025-10065 is categorized as a cross-site scripting vulnerability which can lead to unauthorized script execution.
How do I fix CVE-2025-10065?
To fix CVE-2025-10065, sanitize and validate all user inputs in the affected scripts to prevent malicious payloads.
Which software is affected by CVE-2025-10065?
CVE-2025-10065 affects the itsourcecode POS Point of Sale System version 1.0.
What is the potential impact of CVE-2025-10065?
The potential impact of CVE-2025-10065 includes the execution of arbitrary JavaScript in the user's browser, leading to data theft or session hijacking.
Is CVE-2025-10065 easy to exploit?
Yes, CVE-2025-10065 can be easily exploited by an attacker through specially crafted input.