4 matches found
dojox vulnerable to unescaped string injection
In Dojo Toolkit before 1.14.0, there is unescaped string injection in dojox/Grid/DataGrid...
9.8CVSS9.2AI score0.0254EPSS
SaveExploits2References5Affected Software1
Cross-Site Scripting (XSS)
This is Due to the unescaped quotes in dojox/Grid/DataGrid when editing rows, which would allow an attacker to inject arbitrary HTML and Javascript into a victim's browser. Which makes dojox vulnerable to cross-site scripting...
9.8CVSS8.9AI score0.0254EPSS
SaveExploits2References4Affected Software2
20