CVE-2025-10028

Name of the Vulnerable Software and Affected Versions itsourcecode POS Point of Sale System version 1.0

Description A cross-site scripting issue exists in itsourcecode POS Point of Sale System 1.0. Manipulation of the scripts argument in the file /inventory/main/vendors/datatables/unit testing/templates/6776.php can lead to exploitation. The attack can be launched remotely.

Recommendations As a temporary workaround, consider restricting access to the file /inventory/main/vendors/datatables/unit testing/templates/6776.php until a fix is available. Avoid using the scripts parameter in the affected file until the issue is resolved.