Packagist/gp247/core CVE-2025-57407: medium 5.4, EPSS 0.22%
GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability
Action: Upgrade gp247/core to 1.1.24 or later.
composer require gp247/core:1.1.24Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.24 | - |
Fixed versions
| 1.1.24 |
Sources
- osv: GHSA-46v4-5mc8-q2cf#Packagist/gp247/core
- nvd: CVE-2025-57407
- https://github.com/gp247net/core/commit/e9848706b41d835ca3d668cb1554650403e86da1
- https://github.com/gp247net/core/releases/tag/1.1.24
- https://github.com/s-cart/core/blob/7c9aa42761be5fd0131c61dbe2b5323beb96d5dd/src/Admin/Controllers/AdminLogController.php
CVE-2025-57407 · published · modified · JSON