Skip to content
Sign in
Not rated

CVE-2020-7690 All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS)

Description

All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.

Affected products and versions

Product Affected versions Fixed in
jspdf 2.0 earliest → < 2.0.0 2.0.0

Other CVEs of jspdf

The 3 CVEs of jspdf →
CVE-2021-23353 This affects the package jspdf before 2.3.1 5.9 Medium CVE-2020-7691 In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex 6.3 Medium
Track this CVE