ICustomizer, CVE-2021-24435
- CVE, Research URL
- Home page URL
- Application
- Published on
- Sep 06, 2021
- Research Description
- The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues
- Affected versions
-
Min -, max 1.5.0.
- Status
-
vulnerable