VDB

GCVE-110-MAGEIA-2023-39

GCVE-110-MAGEIA-2023-39
Advisory Published
Vulnetix · Advisory published February 7, 2023
Dijit Editor's LinkDialog plugin of dojo 1.14.0 to 1.14.7 is vulnerable to cross-site scripting (XSS) attacks. (CVE-2020-4051) Prototype pollution vulnerability via the setObject() function. (CVE-2021-23450)

Affected Products

VendorProductVersionsPlatforms
Mageiatimezone0 (affected), 2023c-1.mga8 (unaffected)
Mageiadojo0 (affected), 1.16.5-1.mga8 (unaffected), 0 (affected), 1.16.5-1.mga8 (unaffected)

Browse GCVE Records

74,352 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›