CVE-2025-10066: itsourcecode POS Point of Sale System dymanic_table.php cross site scripting

Published Sep 7, 2025

Updated

A security vulnerability has been detected in itsourcecode POS Point of Sale System 1.0. The affected element is an unknown function of the file /inventory/main/vendors/datatables/unittesting/templates/dymanictable.php. Such manipulation of the argument scripts leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

itsourcecode POS Point of Sale System

Facebook-kimmymatillano Point Of Sale System=1.0

Event History

Sep 7, 2025

CVE Published

via MITRE·01:02 AM

Data Sourced

via MITRE·01:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10066?

CVE-2025-10066 is rated as a high-severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2025-10066?

To fix CVE-2025-10066, sanitize and validate user input in the affected file /inventory/main/vendors/datatables/unit_testing/templates/dymanic_table.php.

What does CVE-2025-10066 affect?

CVE-2025-10066 affects the itsourcecode POS Point of Sale System 1.0.

What type of vulnerability is CVE-2025-10066?

CVE-2025-10066 is a cross-site scripting (XSS) vulnerability.

When was CVE-2025-10066 reported?

The details regarding the reporting date of CVE-2025-10066 are currently not specified.