CVE-2018-1000534

CVE-2018-1000534 affects Joplin versions prior to 1.0.90. The issue is a Cross-site Scripting (XSS) that can evolve into code execution due to enabled nodeIntegration in a specific BrowserWindow instance, with the XSS originating in the Note content field. Attackers could exploit this by forcing ...