← CVE Intelligence

CVE-2025-9921

code-projects POS Pharmacy System products.php cross site scripting PUBLISHED

Description (CNA)

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument product_code/gen_name/product_name/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Affected (CNA)

Vendor / productVersions
code-projects / POS Pharmacy Systemaffected 1.0

CWE

CWE-79, CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.