Content Cards Project: >> Content Cards >> 0.9.6 Security Vulnerabilities
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arunas Liuiza Content Cards allows Stored XSS.This issue affects Content Cards: from n/a through 0.9.7.
CVSS Score
6.5
EPSS Score
0.001
Published
2024-02-12
Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-12-03