CVE-2020-7690: Parall Jspdf

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.

Affected products

• Parall Jspdf: before 2.0.0 (fixed in 2.0.0)

Published 2020-07-06. Last modified 2026-06-17.