← voltar
CVE-2021-24435CWE-79

Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 1.8%
probabilidade de exploração
1.8%top 24% das CVEs
exploração observada
nãonenhuma fonte reporta
The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues