Skip to content
OpenAdvisories

Archive

6 September 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1

    Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness

    Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in V…

  • Medium 6.1

    Cross-Site Scripting in exceljs

    An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.