Description
Joplin before 2.11.5 allows XSS via a USE element in an SVG document.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | joplin | < 2.11.5 | 2.11.5 | GHSA-7grw-xfx6-qhx6 |
Medium · 6.1
CVE-2023-37298
EUVD-2023-1732GHSA-7grw-xfx6-qhx6
Joplin Cross-site Scripting vulnerability
Published Jun 30, 2023 · Updated Nov 27, 2024 · Assigned by mitre