Known CVE

WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues.

CVE-2021-24435

Medium2021CVSS 6.1CWE-79

cve2021 · wp · xss · wp-plugin · titan-framework · wpscan · wordpress · gambit

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website