CVE-2017-17096

The vulnerability CVE-2017-17096 affects the WordPress Content Cards plugin prior to version 0.9.7. An XSS flaw exists in processing OpenGraph data, allowing remote attackers to inject arbitrary JavaScript. Practical impact is described as arbitrary script execution via crafted OpenGraph data on ...