description: All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method.
problem types: CWE-79
affected:
{
product: jspdf
vendor: n/a
versions:
status: affected, version: <2.0.0
}