The vulnerability CVE-2025-49302 affects Scott Paterson Easy Stripe versions up to 1.1 and is characterized as an improper control of code generation, resulting in a code injection issue that permits remote code inclusion. This allows an unauthenticated attacker to execute arbitrary code on the affected system, potentially leading to full confidentiality, integrity, and availability compromise. The CVSS 3.1 base score is 10.0, reflecting the critical nature of this vulnerability with network attack vector, low attack complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. No official patch or mitigation guidance is currently available from the vendor or other sources.

Successful exploitation of this vulnerability can allow an attacker to remotely execute arbitrary code on the affected system, resulting in full system compromise including disclosure, modification, or destruction of data and disruption of service. Given the CVSS score of 10.0, the impact is critical with complete loss of confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or isolating the affected Easy Stripe versions to prevent exposure. Monitor vendor channels for updates and apply patches promptly once available.