Joplin Security Vulnerabilities

Joplin is an open source notes and to-do list application. A security vulnerability exists in Joplin version 2.12.8 and earlier versions. An attacker can run arbitrary commands by exploiting the vulnerability...

PT-2024-12815 · Joplin · Joplin

Name of the Vulnerable Software and Affected Versions: Joplin versions prior to 2.12.8 Description: A Cross site scripting XSS vulnerability in Joplin allows clicking on an untrusted image link to execute arbitrary shell commands. The HTML sanitizer preserves links, but unlike links, the target a...