CVE-2025-2218

Name of the Vulnerable Software and Affected Versions: LoveCards LoveCardsV2 versions up to 2.3.2

Description: A critical vulnerability has been found in the Setting Handler component, affecting unknown code of the file /api/system/other. This leads to improper access controls and can be initiated remotely. The vendor was contacted about the disclosure but did not respond.

Recommendations: For LoveCards LoveCardsV2 versions up to 2.3.2, consider restricting access to the /api/system/other endpoint until a patch is available. As a temporary workaround, review and tighten access controls to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.