Webtelnet proxy allows XSS input from telnet server.

[joshuah]

Malicious javascript <script> tags can be passed from the telnet server to web clients.

<script>document.title='XSS';alert('XSS works');</script>