CVE-2020-7691

In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...

CVE-2020-7691

In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...

CVE-2020-7690

All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...

Design/Logic Flaw

In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...

Cross site scripting

All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...

CVE-2020-7690

CVE-2020-7690 affects jspdf versions before 2.0.0, where the html() method can be used to inject JavaScript via XSS. Affected software is jspdf prior to 2.0.0; the vulnerability enables executing injected scripts in user-controlled contexts. The Red Hat, GitHub Advisory, npm Advisory, and CVE rec...

CVE-2020-7691

CVE-2020-7691 : Multiple sources confirm a cross-site scripting (XSS) vulnerability in jspdf affecting all versions. The issue arises from inability to filter/validate nested script tags such as <[removed]script>, allowing injection of arbitrary JavaScript in the browser. Remediation: upgra...

CVE-2020-7691 Cross-site Scripting (XSS)

In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...

CVE-2020-7690: Improper Neutralization of Input During Web Page Generation

All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...

CVE-2020-7691: Improper Neutralization of Input During Web Page Generation

In all versions of the package jspdf, it is possible to use...

PT-2020-19713 · Jpdf · Jspdf

Name of the Vulnerable Software and Affected Versions: jspdf versions prior to 2.0.0 Description: The issue allows for Cross-site Scripting XSS attacks, where it is possible to inject JavaScript code via the html method. Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or lat...

Cross-Site Scripting (XSS)

jspdf is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the HTML method...

Cross-site Scripting (XSS)

Overview jspdf is a PDF Document creation from JavaScript Affected versions of this package are vulnerable to Cross-site Scripting XSS. It's possible to inject JavaScript code via the html method. PoC var doc = new jsPDF; window.html2canvas = html2canvas; let html = a ; doc.htmlhtml, callback:...

Cross-site Scripting (XSS)

Overview jspdf is a PDF Document creation from JavaScript Affected versions of this package are vulnerable to Cross-site Scripting XSS. It's possible to use script in order to go over the filtering regex. PoC import jsPDF from "jspdf"; var doc = new jsPDF; let html = a...