CyberSecBulletin

LoveCards vulnerabilities

We track 2 vulnerabilities in LoveCards products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 12, 2025.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest LoveCards vulnerabilities

  • 9.8 Critical severity

    LoveCardsV2: Unrestricted Upload of File with Dangerous Type

    CVE-2025-2219LoveCards

    A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated

  • 9.8 Critical severity

    LoveCardsV2: Incorrect Privilege Assignment

    CVE-2025-2218LoveCards

    A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The atta