CVE-2025-10027

2.0 lowEPSS 0.3%

Low (2.0) in facebook-kimmymatillano point of sale system. EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2025-09-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

facebook-kimmymatillano:point_of_sale_system

References

https://github.com/AlphabugX/CVE-Report/blob/main/CVE-004.md
https://itsourcecode.com/
https://vuldb.com/?ctiid.322742
https://vuldb.com/?id.322742
https://vuldb.com/?submit.643942

Check your stack JSON