Vulnerabilities > Dojotoolkit > Dojo > 1.13.0

DATE CVE VULNERABILITY TITLE RISK
2018-09-06 CVE-2018-1000665 Cross-site Scripting vulnerability in Dojotoolkit Dojo
Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliver malware, steal HTTP cookies, bypass CORS trust. 		4.3
4.3
2018-08-18 CVE-2018-15494 Improper Encoding or Escaping of Output vulnerability in multiple products
In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
network
low complexity
dojotoolkit debian CWE-116
7.5
7.5
2018-02-02 CVE-2018-6561 Cross-site Scripting vulnerability in Dojotoolkit Dojo 1.13.0
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element. 		4.3
4.3