The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Awesome Support Plugin | — | Update awesome-support plugin to version 6.0.11, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Easy Justified Gallery Plugin | — | Update easy-justified-gallery plugin to version 1.1.1, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Icustomizer Plugin | — | Update icustomizer plugin to version 1.5.0, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Live Chat Facebook Fanpage Plugin | — | Update live-chat-facebook-fanpage plugin to version 3.1.1, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Mobile Menu Plugin | — | Update mobile-menu plugin to version 2.8.2.3, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Station Pro Plugin | — | Update station-pro plugin to version 2.2.2, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Template Events Calendar Plugin | — | Update template-events-calendar plugin to version 1.7.2, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Venture Event Manager Plugin | — | Update venture-event-manager plugin to version 3.2.5, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| W3s Cf7 Zoho Plugin | — | Update w3s-cf7-zoho plugin to version 2.1.0, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Webhotelier Plugin | — | Update webhotelier plugin to version 1.6.1, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
| Yandex Money Button Plugin | — | Update yandex-money-button plugin to version 2.4.0, or a newer patched version | May 15, 2025 | Aug 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub