CVE-2020-7690 | BDVDB-2026-138446 Detail

jspdf

Description#

All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://snyk.io/vuln/SNYK-JS-JSPDF-575256
https://github.com/MrRio/jsPDF/issues/2795

Exploit#

No public exploit known

History#

Version 12020-07-06Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.