Packagist/s-cart/core CVE-2025-57407: medium 5.4, EPSS 0.22%
GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 9.0.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-46v4-5mc8-q2cf
- nvd: CVE-2025-57407
- https://github.com/gp247net/core/commit/e9848706b41d835ca3d668cb1554650403e86da1
- https://github.com/gp247net/core/releases/tag/1.1.24
- https://github.com/s-cart/core/blob/7c9aa42761be5fd0131c61dbe2b5323beb96d5dd/src/Admin/Controllers/AdminLogController.php
CVE-2025-57407 · published · modified · JSON