Skip to content
OpenAdvisories

Package · Packagist

gp247/core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-57407

    GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability

    A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator's browser wh…

    s-cart/core gp247/core Packagist