CVE-2025-7607

Name of the Vulnerable Software and Affected Versions: Simple Shopping Cart version 1.0

Description: A critical issue exists in the processing of the /Customers/save order.php file. Manipulation of the order price argument can lead to SQL injection. This issue may be exploited remotely, and details about the exploit have been publicly disclosed.

Recommendations: As a temporary workaround, consider restricting access to the /Customers/save order.php file until a fix is available. Avoid using the order price parameter in the affected file until the issue is resolved.