Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22505
HistoryFeb 14, 2020 - 5:34 a.m.

Cross-Site Scripting (XSS)

2020-02-1405:34:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.002 Low

EPSS

Percentile

58.4%

dojox is vulnerable to cross-site scripting (XSS). insufficient XML escaping in dojox.xmpp.util.xmlEncode allows an attacker to inject and execute arbitrary Javascript in a user’s browser via a malicious XML document.