Skip to content
OpenAdvisories

Package · Packagist

s-cart/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-57407

    GP247 and S-Cart have a stored cross-site scripting (XSS) vulnerability

    A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator's browser wh…

    s-cart/core gp247/core Packagist
  • Medium 5.4
    CVE-2022-21149

    Cross-site Scripting (XSS)

    The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any victim that visits the affected URL so the attacker can gain unauthorized access to that user's acco…

    s-cart/core s-cart/s-cart Packagist