CVE-2021-24435: vulnerability in Titan Framework
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Published · Updated
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.7%
exploitation probability
1.7%top 23% of all CVEs
observed exploitation
nono source reports it
The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues
Affected products
Unknown · Titan Framework