Content Cards Project Content Cards — known CVE vulnerabilities

Every CVE whose affected-product data names Content Cards Project Content Cards, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-24928 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arunas Liuiza Content Cards allows…
• CVE-2017-17096 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary…