3 matches found
CVE-2023-37299
Joplin before 2.11.5 allows XSS via an AREA element of an image map.
CVE-2023-37298
Joplin before 2.11.5 allows XSS via a USE element in an SVG document.
CVE-2022-45598
Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization.