Dojotoolkit Dojo — known CVE vulnerabilities

Every CVE whose affected-product data names Dojotoolkit Dojo, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2010-2276 — CVSS 10.0 (critical): The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4…
• CVE-2010-2272 — CVSS 10.0 (critical): Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors.
• CVE-2018-15494 — CVSS 9.8 (critical): In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
• CVE-2018-1000665 — CVSS 6.1 (medium): Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and…
• CVE-2018-6561 — CVSS 6.1 (medium): dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.
• CVE-2015-5654 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2010-2275 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject…
• CVE-2008-6681 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2010-2273 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3…
• CVE-2010-2274 — CVSS 4.3 (medium): Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x…
• CVE-2007-6726 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote…