WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting Detection

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues. !/usr/bin/env python3 -- coding: utf-8 -- """The...

CVE-2014-6444

Multiple cross-site scripting XSS vulnerabilities in the Titan Framework plugin before 1.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 t parameter to iframe-googlefont-preview.php or the 2 text parameter to iframe-font-preview.php...

PT-2016-3496

Name of the Vulnerable Software and Affected Versions Titan Framework plugin versions prior to 1.6 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabiliti...