CVE-2020-7691

CVE-2020-7691 : Multiple sources confirm a cross-site scripting (XSS) vulnerability in jspdf affecting all versions. The issue arises from inability to filter/validate nested script tags such as <[removed]script>, allowing injection of arbitrary JavaScript in the browser. Remediation: upgra...

PT-2020-19713 · Jpdf · Jspdf

Name of the Vulnerable Software and Affected Versions: jspdf versions prior to 2.0.0 Description: The issue allows for Cross-site Scripting XSS attacks, where it is possible to inject JavaScript code via the html method. Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or lat...

Cross-Site Scripting (XSS)

jspdf is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the HTML method...

Cross-site Scripting (XSS)

Overview jspdf is a PDF Document creation from JavaScript Affected versions of this package are vulnerable to Cross-site Scripting XSS. It's possible to inject JavaScript code via the html method. PoC var doc = new jsPDF; window.html2canvas = html2canvas; let html = a ; doc.htmlhtml, callback:...

Cross-site Scripting (XSS)

Overview jspdf is a PDF Document creation from JavaScript Affected versions of this package are vulnerable to Cross-site Scripting XSS. It's possible to use script in order to go over the filtering regex. PoC import jsPDF from "jspdf"; var doc = new jsPDF; let html = a...