3 matches found
CVE-2020-9038
Joplin through 1.0.184 allows Arbitrary File Read via XSS.
CVE-2020-28249
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.
CVE-2020-15930
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.