LoveCardsV2 vulnerabilities

2 known vulnerabilities in LoveCardsV2 from LoveCards. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  LoveCardsV2: Unrestricted Upload of File with Dangerous Type

  CVE-2025-2219Mar 12, 2025LoveCards

  A vulnerability was found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This issue affects some unknown processing of the file /api/upload/image. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated

• 9.8 Critical severity

  LoveCardsV2: Incorrect Privilege Assignment

  CVE-2025-2218Mar 12, 2025LoveCards

  A vulnerability has been found in LoveCards LoveCardsV2 up to 2.3.2 and classified as critical. This vulnerability affects unknown code of the file /api/system/other of the component Setting Handler. The manipulation leads to improper access controls. The atta