CVE-2019-10785

PoC —

CVSS 3.1

6.1 medium

EPSS

2%p78

Published

Feb 13, 2020 (Feb 13, 2020)

Modified

Jun 17, 2026

Description

dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

Vendors: linuxfoundation debian
Products: dojox, debian linux
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.