Skip to content
OpenAdvisories

Package · npm

dojox

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2019-10785

    XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode

    dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

    dojo dojo dojox Debian Ubuntu npm