@esfaenza/core (>=15.2.16, <=19.2.114) potentially affected by CVE-2021-43862 via jquery.terminal (2.23.2)

jquery.terminal NPM version 2.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on jquery.terminal and may be impacted: - @esfaenza/core =15.2.16, =19.2.114 Source cves: CVE-2021-43862 Source advisory: OSV:GHSA-X9R5-JXVQ-4387...

CVE-2021-43862

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

CVE-2021-43862 Self XSS on user input

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...