Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-33295 EUVD-2022-6113GHSA-phj8-2p6x-hq5r

Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags

Published Jun 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code due to improper sanitizing of html.

Affected packages

EcosystemPackageAffectedFixedRecord
npm joplin < 1.8.5 1.8.5 GHSA-phj8-2p6x-hq5r

References