Логотип exploitDog
bind:CVE-2021-24435
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-24435

Количество 2

Количество 2

nvd логотип

CVE-2021-24435

больше 4 лет назад

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues

CVSS3: 6.1
EPSS: Средний
github логотип

GHSA-jghx-rx2p-62q9

больше 3 лет назад

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues

EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-24435

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues

CVSS3: 6.1
13%
Средний
больше 4 лет назад
github логотип
GHSA-jghx-rx2p-62q9

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues

13%
Средний
больше 3 лет назад

Уязвимостей на страницу