medium6.1
CVE-2020-7690
All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS).
Impact
All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Parall | Jspdf | before 2.0.0 |