Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-09-06	CVE-2018-1000665	Cross-site Scripting vulnerability in Dojotoolkit Dojo Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliver malware, steal HTTP cookies, bypass CORS trust. network low complexity dojotoolkit CWE-79	6.1
2018-02-02	CVE-2018-6561	Cross-site Scripting vulnerability in Dojotoolkit Dojo 1.13.0 dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element. network low complexity dojotoolkit CWE-79	6.1