Description (CNA)
All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / jspdf | affected <2.0.0 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.