CVE-2025-57407
2 advisories.
Packagist/s-cart/core CVE-2025-57407: low
GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 9.0.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-46v4-5mc8-q2cf
- https://nvd.nist.gov/vuln/detail/CVE-2025-57407
- https://github.com/gp247net/core/commit/e9848706b41d835ca3d668cb1554650403e86da1
- https://github.com/gp247net/core/releases/tag/1.1.24
- https://github.com/s-cart/core/blob/7c9aa42761be5fd0131c61dbe2b5323beb96d5dd/src/Admin/Controllers/AdminLogController.php
CVE-2025-57407 · published · modified · JSON
Packagist/gp247/core CVE-2025-57407: low
GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability
Action: Upgrade gp247/core to 1.1.24 or later.
composer require gp247/core:1.1.24Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.24 | - |
Fixed versions
| 1.1.24 |
Sources
- osv: GHSA-46v4-5mc8-q2cf#Packagist/gp247/core
- https://nvd.nist.gov/vuln/detail/CVE-2025-57407
- https://github.com/gp247net/core/commit/e9848706b41d835ca3d668cb1554650403e86da1
- https://github.com/gp247net/core/releases/tag/1.1.24
- https://github.com/s-cart/core/blob/7c9aa42761be5fd0131c61dbe2b5323beb96d5dd/src/Admin/Controllers/AdminLogController.php
CVE-2025-57407 · published · modified · JSON