Approved changes feed: RSS · Atom

cpe:2.3:a:lovecards:lovecardsv2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLovecards (535f61b7-25ee-5957-b0db-582e0c5ea3e4)
ProductLovecardsv2 (8571bd96-2124-50b3-98e4-28ee4f4277f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/lovecards/lovecardsv2 purl2cpe 2026-06-01 10:11:52.353762

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2219 vulnerable 2026-06-08 07:16:56.499787 LoveCards LoveCardsV2 image unrestricted upload
HIGH (7.3)
A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-12T00:31:07.135Z
Updated: 2025-03-12T15:41:32.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2218 vulnerable 2026-06-08 07:16:56.422889 LoveCards LoveCardsV2 Setting other access control
MEDIUM (5.3)
A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-12T00:31:04.872Z
Updated: 2025-03-12T16:13:30.486Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.