| Package | Affected versions | Patched versions |
|---|---|---|
| dijit | ≥ 1.12.0, < 1.12.9≥ 1.13.0, < 1.13.8≥ 1.14.0, < 1.14.7≥ 1.15.0, < 1.15.4≥ 1.16.0, < 1.16.3< 1.11.11 | 1.12.91.13.81.14.71.15.41.16.31.11.11 |
| dijit | ≥ 1.12.0, < 1.12.9≥ 1.13.0, < 1.13.8≥ 1.14.0, < 1.14.7≥ 1.15.0, < 1.15.4≥ 1.16.0, < 1.16.3< 1.11.11 | 1.12.91.13.81.14.71.15.41.16.31.11.11 |
XSS possible for users of the Dijit Editor's LinkDialog plugin
Yes, 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3
Users may apply the patch made in these releases.
If you have any questions or comments about this advisory, open an issue in dojo/dijit
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free