VYPR

Content Cards

by Content Cards Project

Source repositories

CVEs (2)

  • CVE-2024-24928MedFeb 12, 2024
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arunas Liuiza Content Cards allows Stored XSS.This issue affects Content Cards: from n/a through 0.9.7.

  • CVE-2017-17096MedDec 3, 2017
    risk 0.40cvss 6.1epss 0.00

    Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data.