2 matches found
CVE-2023-37299
Joplin before 2.11.5 allows XSS via an AREA element of an image map.
CVE-2023-37298
Joplin before 2.11.5 allows XSS via a USE element in an SVG document.