CVE-2025-9921

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument product_code/gen_name/product_name/supplier causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Sep 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-99226.1A security vulnerability has been detected in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functio CVE-2025-99236.1A flaw has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /index.php. Executing manipulati CVE-2025-99249.8A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.p CVE-2025-99259.8A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php.CVE-2025-99269.8A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the file /viewsubcategory.p CVE-2025-99279.8A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewp CVE-2025-99289.8A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown function of the file /CVE-2025-99294.8A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogs_view.php. Execu CVE-2025-99309.8A security vulnerability has been detected in 1000projects Beauty Parlour Management System 1.0. This impacts an unknown function of the fil CVE-2025-99316.1A vulnerability was detected in Jinher OA 1.0. Affected is an unknown function of the file /jc6/platform/sys/login!changePassWord.action of CVE-2025-99329.8A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the CVE-2025-99339.8A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of t