CVE-2025-10067

Name of the Vulnerable Software and Affected Versions itsourcecode POS Point of Sale System version 1.0

Description A cross site scripting issue exists in itsourcecode POS Point of Sale System. The issue is located in an unknown function of the file /inventory/main/vendors/datatables/unit testing/templates/empty table.php. Manipulation of the scripts argument can trigger the issue, and it is possible to initiate the attack remotely. The exploit is publicly available.

Recommendations As a temporary workaround, consider restricting access to the file /inventory/main/vendors/datatables/unit testing/templates/empty table.php to minimize the risk of exploitation. Avoid using the scripts parameter in the affected file until the issue is resolved.