{"id":"CVE-2019-10785","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-10785","generatedAt":"2026-10-28T22:44:22.001Z","title":"dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9.","description":"dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.","published":"2020-02-13T17:15:29.000Z","lastModified":"2026-06-17T02:11:40.000Z","status":"Modified","sourceIdentifier":"report@snyk.io","cvss":{"version":"3.1","score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["linuxfoundation/dojox","debian/debian linux"],"epss":{"score":0.01845,"percentile":0.78923,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.85%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/dojo/dojox/security/advisories/GHSA-pg97-ww7h-5mjr","tags":["Exploit","Third Party Advisory"],"source":"report@snyk.io"},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00033.html","tags":["Mailing List","Third Party Advisory"],"source":"report@snyk.io"},{"url":"https://snyk.io/vuln/SNYK-JS-DOJOX-548257%2C","source":"report@snyk.io"},{"url":"https://github.com/dojo/dojox/security/advisories/GHSA-pg97-ww7h-5mjr","tags":["Exploit","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00033.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://snyk.io/vuln/SNYK-JS-DOJOX-548257%2C","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-10785","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}