jQuery MiniColors vulnerable to Cross-site Scripting

jQuery MiniColors plugin fails to properly sanitize user input in color values, allowing attackers to inject malicious JavaScript code that executes in the browser of anyone viewing the affected page. This can lead to theft of sensitive data or unauthorized actions on behalf of users.

Cross-site scripting vulnerability in jQuery MiniColors color input handling due to insufficient input validation. An attacker can inject malicious script through untrusted menu data, which executes in the victim's browser context with the privileges of the vulnerable application. Exploitation requires user interaction with crafted color input.