2 matches found
CVE-2020-9038
Joplin through 1.0.184 allows Arbitrary File Read via XSS.
CVE-2020-15930
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.