297 matches found
Cross site scripting
All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...
CVE-2020-7690
CVE-2020-7690 affects jspdf versions before 2.0.0, where the html() method can be used to inject JavaScript via XSS. Affected software is jspdf prior to 2.0.0; the vulnerability enables executing injected scripts in user-controlled contexts. The Red Hat, GitHub Advisory, npm Advisory, and CVE rec...
@0xgg/echomd (>=1.0.0, <=1.0.4), @budibase/client (>=3.8.2, <=3.24.3) +117 more potentially affected by CVE-2020-7690 via jspdf (>=1.0.272, <=1.5.2)
jspdf NPM version =1.0.272, =1.0.0, =3.8.2, =0.0.3, =1.0.0, =2.6.4, =1.54.0, =0.2.1, =1.1.4, =0.0.0-dev.3763479, =1.0.0, =0.0.98, =1.15.0-alpha.1, =1.18.11 and more Source cves: CVE-2020-7690 Source advisory: MEND:CVE-2020-7690...
CVE-2020-7690
All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...
CVE-2020-7691
In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...
CVE-2020-7691
CVE-2020-7691 : Multiple sources confirm a cross-site scripting (XSS) vulnerability in jspdf affecting all versions. The issue arises from inability to filter/validate nested script tags such as <[removed]script>, allowing injection of arbitrary JavaScript in the browser. Remediation: upgra...
@0xgg/echomd (>=1.0.0, <=1.0.4), @budibase/client (>=3.8.2, <=3.24.3) +117 more potentially affected by CVE-2020-7691 via jspdf (>=1.0.272, <=1.5.2)
jspdf NPM version =1.0.272, =1.0.0, =3.8.2, =0.0.3, =1.0.0, =2.6.4, =1.54.0, =0.2.1, =1.1.4, =0.0.0-dev.3763479, =1.0.0, =0.0.98, =1.15.0-alpha.1, =1.18.11 and more Source cves: CVE-2020-7691 Source advisory: MEND:CVE-2020-7691...
CVE-2020-7691 Cross-site Scripting (XSS)
In all versions of the package jspdf, it is possible to use script in order to go over the filtering regex...
CVE-2020-7691
In all versions of the package jspdf, it is possible to use...
CVE-2020-7690
All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...
CVE-2020-7691: Improper Neutralization of Input During Web Page Generation
In all versions of the package jspdf, it is possible to use...
PT-2020-19714
Name of the Vulnerable Software and Affected Versions jspdf versions affected versions not specified Description The issue allows an attacker to bypass the filtering regex by using nested script tags or specifically script tags. This can potentially lead to unauthorized execution of scripts...
PT-2020-19713 · Jpdf · Jspdf
Name of the Vulnerable Software and Affected Versions: jspdf versions prior to 2.0.0 Description: The issue allows for Cross-site Scripting XSS attacks, where it is possible to inject JavaScript code via the html method. Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or lat...
CVE-2020-7690: Improper Neutralization of Input During Web Page Generation
All affected versions 2.0.0 of package jspdf are vulnerable to Cross-site Scripting XSS. It is possible to inject JavaScript code via the html method...
Cross-Site Scripting (XSS)
jspdf is vulnerable to cross-site scripting. An attacker is able to inject and execute arbitrary Javascript in a user's browser via the HTML method...
Cross-site Scripting (XSS)
Overview jspdf is a PDF Document creation from JavaScript Affected versions of this package are vulnerable to Cross-site Scripting XSS. It's possible to inject JavaScript code via the html method. PoC var doc = new jsPDF; window.html2canvas = html2canvas; let html = a ; doc.htmlhtml, callback:...
Cross-site Scripting (XSS)
Overview jspdf is a PDF Document creation from JavaScript Affected versions of this package are vulnerable to Cross-site Scripting XSS. It's possible to use script in order to go over the filtering regex. PoC import jsPDF from "jspdf"; var doc = new jsPDF; let html = a...