~ / search / GHSA-cxjc-r2fp-7mq6

GHSA-cxjc-r2fp-7mq6

Cross-site Scripting in dijit editor's LinkDialog plugin

Source: GitHub Advisory Database (reviewed) Low CVE-2020-4051

Packages

EcosystemPackageAffectedFixed in
npm dijit < 1.11.11 1.11.11
npm dijit >= 1.12.0, < 1.12.9 1.12.9
npm dijit >= 1.13.0, < 1.13.8 1.13.8
npm dijit >= 1.14.0, < 1.14.7 1.14.7
npm dijit >= 1.15.0, < 1.15.4 1.15.4
npm dijit >= 1.16.0, < 1.16.3 1.16.3

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact XSS possible for users of the Dijit Editor's LinkDialog plugin ### Patches Yes, 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3 ### Workarounds Users may apply the patch made in these releases. ### For more information If you have any questions or comments about this advisory, open an issue in [dojo/dijit](https://github.com/dojo/dijit/)

References

External links from the advisory. They lead to third-party sites.