Critical CVSS: 9.8 CVE-2025-50722 Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component
Medium CVSS: 5.3 CVE-2024-57685 An issue in sparkshop v.1.1.7 and before allows a remote attacker to execute arbitrary code via a crafted phar file.