Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow remote attackers to inject arbitrary web script or HTML via the CardFontFace parameter and other unspecified parameters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Phpcards | Phpcards | 1.3 (including) | 1.3 (including) |