Description

Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.

Remediation

References

http://trac.dojotoolkit.org/ticket/2140

http://www.dojotoolkit.org/book/dojo-1-1-release-notes

http://www.securityfocus.com/bid/34661

https://exchange.xforce.ibmcloud.com/vulnerabilities/49883

Related Vulnerabilities

CVE-2021-41571 Vulnerability in maven package org.apache.pulsar:pulsar

CVE-2021-23380 Vulnerability in npm package roar-pidusage

CVE-2020-11991 Vulnerability in maven package org.apache.cocoon:cocoon-core

CVE-2022-45693 Vulnerability in maven package org.codehaus.jettison:jettison

CVE-2020-23256 Vulnerability in npm package electerm

Severity

Critical

Classification

CWE-79

Tags

Exploit