Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.8%
exploitation probability
1.8%top 24% of all CVEs
observed exploitation
nono source reports it
The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues
Affected products
Unknown · Titan Framework