https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 18:49:57 +0000 https://db.gcve.eu/vuln/fkie_cve-2025-57407 <p>A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart &lt;=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator&#39;s browser when they view the security log page, which could lead to session hijacking or other malicious actions.</p> <p>A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart &lt;=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator&#39;s browser when they view the security log page, which could lead to session hijacking or other malicious actions.</p> https://db.gcve.eu/vuln/fkie_cve-2025-57407 https://db.gcve.eu/vuln/ghsa-46v4-5mc8-q2cf <p><strong>Affected:</strong> Packagist: s-cart/core, Packagist: gp247/core</p> <p>A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart &lt;=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator&#39;s browser when they view the security log page, which could lead to session hijacking or other malicious actions.</p> <p><strong>Affected:</strong> Packagist: s-cart/core, Packagist: gp247/core</p> <p>A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart &lt;=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator&#39;s browser when they view the security log page, which could lead to session hijacking or other malicious actions.</p> https://db.gcve.eu/vuln/ghsa-46v4-5mc8-q2cf