CVE-2025-10065 – itsourcecode POS Point of Sale System dom_data_th.php cross site scripting

The following table lists the changes that have been made to the
CVE-2025-10065 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Sep. 07, 2025

    Action Type Old Value New Value
    Added Description A weakness has been identified in itsourcecode POS Point of Sale System 1.0. Impacted is an unknown function of the file /inventory/main/vendors/datatables/unit_testing/templates/dom_data_th.php. This manipulation of the argument scripts causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
    Added CVSS V4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
    Added CVSS V2 (AV:N/AC:L/Au:N/C:N/I:P/A:N)
    Added CWE CWE-79
    Added CWE CWE-94
    Added Reference https://github.com/AlphabugX/CVE-Report/blob/main/CVE-009.md
    Added Reference https://itsourcecode.com/
    Added Reference https://vuldb.com/?ctiid.322988
    Added Reference https://vuldb.com/?id.322988
    Added Reference https://vuldb.com/?submit.643947
Share the Post:

Related Posts