CVE-2020-7691 In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex

Description

In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.

Affected products and versions

Product	Affected versions	Fixed in
jspdf	Versions not published

Other CVEs of jspdf

The 3 CVEs of jspdf →

CVE-2021-23353 This affects the package jspdf before 2.3.1 5.9 Medium CVE-2020-7690 All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS) Not rated