{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"9.0.5"}],"component":"s-cart/core","cve_ids":["CVE-2025-57407"],"ecosystem":"Packagist","epss":0.0022,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-46v4-5mc8-q2cf","id":"tcs_01M5KETQX3W97Y8ZA9GS6CW7A6","modified_at":"2025-09-23T20:12:20.321803Z","published_at":"2025-09-23T18:30:22Z","references":["https://osv.dev/vulnerability/GHSA-46v4-5mc8-q2cf","https://nvd.nist.gov/vuln/detail/CVE-2025-57407","https://github.com/gp247net/core/commit/e9848706b41d835ca3d668cb1554650403e86da1","https://github.com/gp247net/core/releases/tag/1.1.24","https://github.com/s-cart/core/blob/7c9aa42761be5fd0131c61dbe2b5323beb96d5dd/src/Admin/Controllers/AdminLogController.php"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-46v4-5mc8-q2cf","url":"https://osv.dev/vulnerability/GHSA-46v4-5mc8-q2cf"},{"source":"nvd","source_id":"CVE-2025-57407","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57407"}],"summary":"GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability"}