ICustomizer, CVE-2021-24435

CVE, Research URL: CVE-2021-24435
Home page URL: Security reports for ICustomizer
Application: ICustomizer
Published on: Sep 06, 2021
Research Description: The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues
Affected versions: Min -, max 1.5.0.
Status: vulnerable