CVE-2020-7690

Summary

All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.

Affected Software

VendorProductVersion RangeStatus
n/ajspdf<2.0.0affected

Weaknesses

  • CWE-79: CWE-79

ADP Enrichment

CVE Program Container

Additional References

References