Skip to content
OpenAdvisories

Package · npm

jquery.terminal

2 known vulnerabilities.

2 results · Feed

  • Low 3.7

    Self XSS on user input

    jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting (XSS) vulnerability. The code for XSS payload is always visible, but an attacker c…

  • Medium —

    Reflected Cross-Site Scripting in jquery.terminal

    Versions of `jquery.terminal` prior to 1.21.0 are vulnerable to Reflected Cross-Site Scripting. If the application has either of the options `anyLinks` or `invokeMethods` set to true, the application may execute arbitrary JavaScript through crafted malicious …