Joplin cross-site scripting vulnerabilities

Joplin is an open source notes and to-do list application. Joplin suffers from a security vulnerability that allows XSS to pass through buttons and forms in the notes body...