WS-2019-0005

Versions of jquery.terminal prior to 1.21.0 are vulnerable to Reflected Cross-Site Scripting. If the application has either of the options anyLinks or invokeMethods set to true, the application may execute arbitrary JavaScript through crafted malicious payloads due to insufficient sanitization...

PT-2019-19992

Name of the Vulnerable Software and Affected Versions jquery.terminal versions prior to 1.21.0 Description The issue is related to Reflected Cross-Site Scripting. If the application has either of the options anyLinks or invokeMethods set to true, it may execute arbitrary JavaScript through crafte...

Cross-site Scripting (XSS)

jquery.terminal is vulnerable to cross-site scripting. It does not properly handle the formatting for backspaces and escape characters for terminal echo, allowing injection of malicious payload if the setting for anyLinks or invokeMethods is true...