{"action":"Upgrade gp247/core to 1.1.24 or later.","affected":[{"fixed":"1.1.24","introduced":"0"}],"component":"gp247/core","cve_ids":["CVE-2025-57407"],"ecosystem":"Packagist","epss":0.0022,"exploited":false,"fixed_versions":["1.1.24"],"ghsa_id":"GHSA-46v4-5mc8-q2cf","id":"tcs_01M5KETQYRD7FAG3Y0D45PT4HB","modified_at":"2025-09-23T20:12:20.321803Z","published_at":"2025-09-23T18:30:22Z","references":["https://osv.dev/vulnerability/GHSA-46v4-5mc8-q2cf","https://nvd.nist.gov/vuln/detail/CVE-2025-57407","https://github.com/gp247net/core/commit/e9848706b41d835ca3d668cb1554650403e86da1","https://github.com/gp247net/core/releases/tag/1.1.24","https://github.com/s-cart/core/blob/7c9aa42761be5fd0131c61dbe2b5323beb96d5dd/src/Admin/Controllers/AdminLogController.php"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-46v4-5mc8-q2cf#Packagist/gp247/core","url":"https://osv.dev/vulnerability/GHSA-46v4-5mc8-q2cf"},{"source":"nvd","source_id":"CVE-2025-57407","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57407"}],"summary":"GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability"}