CVE-2021-24935

The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefontajaxname and googlefontajaxfamily parameter of the googlefontaction AJAx action available to any authenticated user before outputing them in attributes, leading Reflected Cross-Site Scripting issues...

CVE-2021-24935

The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefontajaxname and googlefontajaxfamily parameter of the googlefontaction AJAx action available to any authenticated user before outputing them in attributes, leading Reflected Cross-Site Scripting issues...

CVE-2021-24935

CVE-2021-24935 affects the WordPress WP Google Fonts plugin before 3.1.5. The vulnerability stems from insufficient escaping of googlefont_ajax_name and googlefont_ajax_family in the googlefont_action AJAX action, allowing reflected XSS when outputting these values in attributes. Impact is client...

PT-2021-16375

Name of the Vulnerable Software and Affected Versions: WP Google Fonts WordPress plugin versions prior to 3.1.5 Description: The issue arises from the failure to escape the googlefont ajax name and googlefont ajax family parameters of the googlefont action AJAX action, leading to Reflected...

CVE-2021-24935: Improper Neutralization of Input During Web Page Generation

The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefontajaxname and googlefontajaxfamily parameter of the googlefontaction AJAx action available to any authenticated user before outputing them in attributes, leading Reflected Cross-Site Scripting issues...

WP Google Fonts <= 3.1.3 - Authenticated Reflected Cross-Site Scripting (XSS)

The WP Google Fonts WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...