Description
Joplin before 2.11.5 allows XSS via an AREA element of an image map.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | joplin | < 2.11.5 | 2.11.5 | GHSA-4jjv-p8x9-rrf7 |
Medium · 6.1
CVE-2023-37299
EUVD-2023-1689GHSA-4jjv-p8x9-rrf7
Joplin Cross-site Scripting vulnerability
Published Jun 30, 2023 · Updated Nov 27, 2024 · Assigned by mitre