CVE-2025-12294 – SourceCodester Point of Sales delete_category.php sql injection

CVE ID : CVE-2025-12294

Published : Oct. 27, 2025, 4:15 p.m. | 29 minutes ago

Description : A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

Severity: 5.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…