Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/09/09 2:28 p.m.31 views

CVE-2024-40643 Joplin has a parsing error leading to Cross-site Scripting (XSS)

Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag...

9.6CVSS0.00748EPSS
SaveExploits1References2
Rows per page
Query Builder