← Back

Wp Google Fonts Project

wp_google_fonts_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Wp Google Fonts
wp_google_fonts
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24935
1Wp Google Fonts Project
1Wp Google Fonts
Jun 17, 2026
Dec 6, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing...Show more
The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing them in attributes, leading Reflected Cross-Site Scripting issuesShow less