CVE-2021-24935

CVE-2021-24935 affects the WordPress WP Google Fonts plugin before 3.1.5. The vulnerability stems from insufficient escaping of googlefont_ajax_name and googlefont_ajax_family in the googlefont_action AJAX action, allowing reflected XSS when outputting these values in attributes. Impact is client...