PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.

Published Jun 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre