CVE-2023-37298

creationtimestamp| type| source ---|---|--- 2023-07-01 06:10:12+00:00| seen| https://t.me/cibsecurity/65793...

CVE-2023-37298

Joplin before 2.11.5 allows XSS via a USE element in an SVG document...

CVE-2023-37298

Joplin before 2.11.5 allows XSS via a USE element in an SVG document...

CVE-2023-37298

Joplin prior to 2.11.5 contains a cross-site scripting (XSS) vulnerability via a USE element in an SVG document. Affected product is Joplin (note‑taking app); impact is XSS in contexts that render SVG USE elements. The issue’s root cause is exposure of unsafe SVG usage, with remediation to upgrad...