Titan Framework <= (Various Versions) - Reflected Cross-Site Scripting
mediumThe iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues.
- CVSS:
- 6.1
- Affected:
- up to 3.2.5
- Fixed in:
- 3.2.5
- Disclosed:
- Aug 9, 2021