CNNVD-202509-948 Information

CNNVD ID

CNNVD-202509-948

Related CVE

CVE-2025-10063

• CNNVD Published: 2025-09-06

Description (Chinese)

itsourcecode POS Point of Sale System是itsourcecode开源的一个pos销售点系统。 itsourcecode POS Point of Sale System 1.0版本存在代码注入漏洞，该漏洞源于文件/inventory/main/vendors/datatables/unit_testing/templates/deferred_table.php中参数scripts的错误操作导致跨站脚本攻击。

Description (English)

Its sourcecode POS Point of Sale System is a poss point system of open source for itsourcecode. Its sourcecode POS Point of Sale System 1.0 contains a code-injection loophole, which results from the error of the parameters scripts in the document/inventory/main/vendors/datas/unit testing/templates/deferred table.php.

Hazard Level

High

Vulnerability Type

代码注入

Affected Vendor

itsourcecode

Published

2025-09-06

Last Modified

2026-02-24

References

https://github.com/AlphabugX/CVE-Report/blob/main/CVE-007.md https://vuldb.com/?id.322986 https://itsourcecode.com/ https://vuldb.com/?submit.643945 https://vuldb.com/?ctiid.322986 https://access.redhat.com/security/cve/cve-2025-10063