CVE-2025-10066

2.1 lowEPSS 0.4%

Low (2.1) in facebook-kimmymatillano point of sale system. EPSS 0.4% chance of exploitation in the next 30 days.

A security vulnerability has been detected in itsourcecode POS Point of Sale System 1.0. The affected element is an unknown function of the file /inventory/main/vendors/datatables/unit_testing/templates/dymanic_table.php. Such manipulation of the argument scripts leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2025-09-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

facebook-kimmymatillano:point_of_sale_system

References

https://github.com/AlphabugX/CVE-Report/blob/main/CVE-010.md
https://itsourcecode.com/
https://vuldb.com/?ctiid.322989
https://vuldb.com/?id.322989
https://vuldb.com/?submit.643948

Check your stack JSON