CVE-2025-10063

A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unit_testing/templates/deferred_table.php. The manipulation of the argument scripts leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

• CWE-79
• CWE-94
• CWE-79

• https://github.com/AlphabugX/CVE-Report/blob/main/CVE-007.mdExploit, Third Party Advisory
• https://itsourcecode.com/Product
• https://vuldb.com/?ctiid.322986Permissions Required, VDB Entry
• https://vuldb.com/?id.322986Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.643945Third Party Advisory, VDB Entry
• https://github.com/AlphabugX/CVE-Report/blob/main/CVE-007.mdExploit, Third Party Advisory

Published

Sep 6, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10058The WP Import – Ultimate CSV XML Importer for WordPress plug…8.1
• CVE-2025-10059An improper setting of the lsid field on any sharded query c…6.5
• CVE-2025-1006Use after free in Network in Google Chrome prior to 133.0.69…8.8
• CVE-2025-10060MongoDB Server may allow upsert operations retried within a …7.5
• CVE-2025-10061An authorized user can cause a crash in the MongoDB Server t…6.5
• CVE-2025-10062A vulnerability was determined in itsourcecode Student Infor…9.8
• CVE-2025-10064A security flaw has been discovered in itsourcecode POS Poin…6.1
• CVE-2025-10065A weakness has been identified in itsourcecode POS Point of …6.1
• CVE-2025-10066A security vulnerability has been detected in itsourcecode P…6.1
• CVE-2025-10067A vulnerability was detected in itsourcecode POS Point of Sa…6.1
• CVE-2025-10068A flaw has been found in itsourcecode Online Discussion Foru…9.8
• CVE-2025-1007In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/{…5.3