Lucene search
+L

21 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:22 p.m.•20 views

CVE-2026-43892

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS5.5AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/12 6:17 p.m.•26 views

CVE-2026-43892

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS0.0045EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/12 5:43 p.m.•44 views

CVE-2026-43892 AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS0.0045EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/12 5:43 p.m.•38 views

CVE-2026-43892

AntSword (cross-platform website management toolkit) is affected by CVE-2026-43892 due to incomplete noxss() sanitization before version 2.1.16, enabling a 1-click remote code execution through jquery.terminal format code injection. The vulnerability is fixed in version 2.1.16. Impact is describe...

8.8CVSS5.9AI score0.0045EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/12 5:43 p.m.•12 views

CVE-2026-43892 AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS5.9AI score0.0045EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/12 5:43 p.m.•13 views

CVE-2026-43892 AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS6AI score0.0045EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/12 5:43 p.m.•25 views

EUVD-2026-29721

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS5.9AI score0.0045EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•41 views

PT-2026-40329

AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16...

8.8CVSS5.9AI score0.0045EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•18 views

antSword 跨站脚本漏洞

AntSword is a cross-platform website management tool developed by the AntSwordProject. Versions of AntSword prior to 2.1.16 contained a cross-site scripting vulnerability. This vulnerability stemmed from incomplete noxss cleanup, allowing for injection through jQuery.terminal format code, which...

8.8CVSS6.3AI score0.0045EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•33 views

EUVD-2022-0739

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.01037EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/05/22 9:35 p.m.•33 views

CVE-2021-43862

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

5.4CVSS5.6AI score0.01037EPSS
SaveExploits1
attackerkb
attackerkb
•added 2021/12/30 3:15 p.m.•11 views

CVE-2021-43862

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

5.4CVSS6.2AI score0.01037EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2021/12/30 3:15 p.m.•44 views

CVE-2021-43862

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

5.4CVSS0.01037EPSS
SaveExploits1References4
OSV
OSV
•added 2021/12/30 3:15 p.m.•29 views

CVE-2021-43862

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

5.4CVSS5.6AI score
SaveExploits0References4
Prion
Prion
•added 2021/12/30 3:15 p.m.•37 views

Cross site scripting

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

2.1CVSS5.5AI score0.01037EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2021/12/30 2:15 p.m.•99 views

CVE-2021-43862

Vulnerability context: CVE-2021-43862 affects the jQuery Terminal Emulator (a plugin for command-line interfaces in apps). The issue is a self-XSS via the execHash option when code is loaded from a URL, allowing an attacker to run crafted input in the victim’s browser. The impact is described as ...

5.4CVSS4.8AI score0.01037EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/12/30 2:15 p.m.•58 views

CVE-2021-43862 Self XSS on user input

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

3.7CVSS5.5AI score0.01037EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/30 12:00 a.m.•7 views

CVE-2021-43862: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

5.4CVSS6AI score0.01037EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/12/30 12:00 a.m.•15 views

jQuery 跨站脚本漏洞

jQuery is the United States John Resig individual developers of a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript, and features modularity, plug-in extensions, and so on. A cross-site scripting vulnerability exists in jQuery...

5.4CVSS5.4AI score0.01037EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2021/12/30 12:00 a.m.•32 views

PT-2021-23985 · Unknown · Jquery Terminal Emulator

Name of the Vulnerable Software and Affected Versions: jQuery Terminal Emulator versions prior to 2.31.1 Description: The issue is a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...

5.4CVSS5.2AI score0.01037EPSS
SaveExploits1References10
Rows per page
Query Builder