CVE-2020-7690

Published July 6th, 2020

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.

parallax/jsPDF

Client-side JavaScript PDF generation for everyone.

GitHub

31.2K