CVE-2025-10067: itsourcecode POS Point of Sale System empty_table.php cross site scripting

Published Sep 7, 2025

Updated

A vulnerability was detected in itsourcecode POS Point of Sale System 1.0. The impacted element is an unknown function of the file /inventory/main/vendors/datatables/unittesting/templates/emptytable.php. Performing manipulation of the argument scripts results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Affected Software

2 affected components

itsourcecode POS Point of Sale System

Facebook-kimmymatillano Point Of Sale System=1.0

Event History

Sep 7, 2025

CVE Published

via MITRE·01:32 AM

Data Sourced

via MITRE·01:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Sep 2, 58718

Event

via NVD·01:26 AM

Frequently Asked Questions

What is the severity of CVE-2025-10067?

CVE-2025-10067 is classified as a high-severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2025-10067?

To fix CVE-2025-10067, sanitize and validate user inputs in the affected components to prevent script injection.

What systems are affected by CVE-2025-10067?

CVE-2025-10067 specifically affects itSourceCode POS Point of Sale System version 1.0.

What type of vulnerability is CVE-2025-10067?

CVE-2025-10067 is a cross-site scripting (XSS) vulnerability that allows attackers to inject client-side scripts.

Is CVE-2025-10067 being actively exploited?

As of the latest updates, there are reports indicating that CVE-2025-10067 is currently being targeted by attackers.