Description
AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed in 2.1.16.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AntSwordProject | antSword | < 2.1.16 | — |