rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.042
EPSS Ranking 88.1%