CVE-2010-2275

N/A Unknown
Published: June 15, 2010 Modified: April 29, 2026
View on NVD

Description

Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://bugs.dojotoolkit.org/ticket/10773
Source: cve@mitre.org
Exploit
http://secunia.com/advisories/38964
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/40007
Source: cve@mitre.org
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21431472
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958
Source: cve@mitre.org
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994
Source: cve@mitre.org
http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/
Source: cve@mitre.org
Exploit
http://www.vupen.com/english/advisories/2010/1281
Source: cve@mitre.org
Vendor Advisory
http://bugs.dojotoolkit.org/ticket/10773
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://secunia.com/advisories/38964
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/40007
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21431472
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958
Source: af854a3a-2127-422b-91ae-364da2661108
http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.vupen.com/english/advisories/2010/1281
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

26 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
17.8%
95th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

dojotoolkit

Related CVEs

CVE-2026-8431 7.2
CVE-2026-8430 8.1
CVE-2026-8429 8.8
CVE-2026-34684 5.5
CVE-2026-34683 5.5