CVE-2020-7691
CVE-2020-7691 · Cross-site Scripting (XSS)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.
CVSS 6.3 · Medium · EPSS 1.6% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
Original sources
- https://snyk.io/vuln/SNYK-JS-JSPDF-568273
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-575255
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-575254
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-575253
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575252
- https://nvd.nist.gov/vuln/detail/CVE-2020-7691