Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-10785
HistoryFeb 13, 2020 - 5:15 p.m.

Cross site scripting

2020-02-1317:15:00
PRIOn knowledge base
www.prio-n.com
4

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%