EPSS
Percentile
77.0%
This is Due to the unescaped quotes in dojox/Grid/DataGrid when editing rows, which would allow an attacker to inject arbitrary HTML and Javascript into a victimβs browser. Which makes dojox vulnerable to cross-site scripting.
dojox/Grid/DataGrid
dojotoolkit.org/blog/dojo-1-14-released
github.com/dojo/dojox/commit/e92ee87750af8fbc7e474bb8e8661821aa9f88fa
github.com/dojo/dojox/pull/283