TI-2021-06725 CVE-2021-24435 · GHSA-jghx-rx2p-62q9Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)Priority LOW 31The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01714 · Published 2021-09-06 · No fix listed CWE-79