Vulnerabilities > Joplin Project > Joplin > 1.0.305

DATE CVE VULNERABILITY TITLE RISK
2021-08-03 CVE-2021-37916 Cross-site Scripting vulnerability in Joplin Project Joplin
Joplin before 2.0.9 allows XSS via button and form in the note body.
network
low complexity
joplin-project CWE-79
6.1