What’s Vulnerable › Vulnerabilities
CVE-2025-9921: code-projects POS Pharmacy System products.php cross site scripting
- Severity: medium (CVSS 5.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-09-03 · updated 2026-06-17
- Weakness: CWE-79
Description
A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument product_code/gen_name/product_name/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected products
References
- https://code-projects.org/
- https://github.com/chen2496088236/CVE/issues/4
- https://vuldb.com/?ctiid.322322
- https://vuldb.com/?id.322322
- https://vuldb.com/?submit.642420
- https://github.com/chen2496088236/CVE/issues/4
Get alerted when CVE-2025-9921 or the next vulnerability affects your stack