Cross-site Scripting (XSS)

jqGrid is vulnerable to cross-site scripting XSS attacks. These attacks are possible because HTML is being directly made from untrusted data with no escaping of attribute strings...