CVE-2018-6561: Dojotoolkit Dojo

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.

Affected products

• Dojotoolkit Dojo: version 1.13.0 only

Published 2018-02-02. Last modified 2026-06-17.