Description
A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unit_testing/templates/deferred_table.php. The manipulation of the argument scripts leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| itsourcecode | POS Point of Sale System | 1.0 | — |
References
- VDB-322986 | itsourcecode POS Point of Sale System deferred_table.php cross site scripting vdb-entry technical-description
- VDB-322986 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #643945 | itsourcecode Point of Sale System (POS) 1.0 Cross Site Scripting third-party-advisory
- https://github.com/AlphabugX/CVE-Report/blob/main/CVE-007.md exploit
- https://itsourcecode.com/ product