CNNVD-202509-723 Information

CNNVD ID

CNNVD-202509-723

CVE-2025-10026

  • CNNVD Published: 2025-09-05

Description (Chinese)

itsourcecode POS Point of Sale System是itsourcecode开源的一个pos销售点系统。 itsourcecode POS Point of Sale System 1.0版本存在代码注入漏洞,该漏洞源于对参数scripts的错误操作导致跨站脚本攻击。

Description (English)

Its sourcecode POS Point of Sale System is a poss point system of open source for itsourcecode. Its sourcecodecode POS Point of Sale System 1.0 has a code-infusion loophole, which results from a wrong operation on parameter scripts leading to a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

itsourcecode

Published

2025-09-05

Last Modified

2026-02-24

References

https://vuldb.com/?submit.643941 https://vuldb.com/?ctiid.322741 https://github.com/AlphabugX/CVE-Report/blob/main/CVE-003.md https://itsourcecode.com/ https://vuldb.com/?id.322741 https://access.redhat.com/security/cve/cve-2025-10026

Share on: