CVE-2018-6561 PUBLISHED

dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.

EPSS 0.20% · 41.9th percentile

Risk Scores

EPSS Score
0.20%
41.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:20.04:LTSdojo0, 1.15.0+dfsg1-1ubuntu0.1~esm1, 1.15.0+dfsg1-1
Ubuntu:25.10dojo1.17.3+dfsg1-1, 0
Ubuntu:Pro:16.04:LTSdojo0, 1.10.4+dfsg-2ubuntu0.1~esm1, 1.10.4+dfsg-2
Ubuntu:22.04:LTSdojo0, 1.15.4+dfsg1-1, 1.15.4+dfsg1-1ubuntu0.1
Ubuntu:18.04:LTSdojo1.11.0+dfsg-1, 0
Ubuntu:24.04:LTSdojo0, 1.17.2+dfsg1-2.1

Timeline

References

Open in Interactive Console →