CVE-2025-30547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Tufts WP Cards wp-cards allows Reflected XSS.This issue affects WP Cards: from n/a through = 1.5.1...

CVE-2025-30547 WordPress WP Cards plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Tufts WP Cards wp-cards allows Reflected XSS.This issue affects WP Cards: from n/a through = 1.5.1...

CVE-2025-30547 WordPress WP Cards plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Tufts WP Cards allows Reflected XSS. This issue affects WP Cards: from n/a through 1.5.1...

CVE-2025-30547

CVE-2025-30547 affects WP Cards (WordPress plugin) up to version 1.5.1. It is a Reflected XSS caused by improper neutralization of input during web page generation, enabling script injection via a crafted URL. CVSSv3.1 base score 7.1 (HIGH). No exploitation details are provided in the connected d...