CVE-2021-24435: Gambit Titan Framework

Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days.

The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues

Affected products

• Gambit Titan Framework: up to and including 1.12.1

Published 2021-09-06. Last modified 2026-06-17.