Security Advisory
CVE-2020-7690
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.