Most recent entries from all

cnvd-2015-06624

EUVD-2026-93615

fkie_cve-2015-5654

Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-p82g-2xpp-m5r3 — Cross-Site Scripting in dojo

Affected: npm: dojo

Versions of `dojo` prior to 1.2.0 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize HTML code in user-controlled input, allowing attackers to execute arbitrary JavaScript in the victim's browser.

## Recommendation

Upgrade to version 1.2.0 or later.

gsd-2015-5654

jvndb-2015-000153

Dojo Toolkit is a software to assist in building web applications. Dojo Toolkit contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.