PT-2019-19992

Name of the Vulnerable Software and Affected Versions jquery.terminal versions prior to 1.21.0 Description The issue is related to Reflected Cross-Site Scripting. If the application has either of the options anyLinks or invokeMethods set to true, it may execute arbitrary JavaScript through crafte...

Cross-site Scripting (XSS)

jquery.terminal is vulnerable to cross-site scripting. It does not properly handle the formatting for backspaces and escape characters for terminal echo, allowing injection of malicious payload if the setting for anyLinks or invokeMethods is true...