← CVE Intelligence

CVE-2021-24435

Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues

Affected (CNA)

Vendor / productVersions
Unknown / Titan Frameworkaffected 1.12.1 through 1.12.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.