Design/Logic Flaw

Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results...