Vulnerabilities > Joplin Project > Joplin > 1.0.84
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-30 | CVE-2023-37298 | Cross-site Scripting vulnerability in Joplin Project Joplin Joplin before 2.11.5 allows XSS via a USE element in an SVG document. | 6.1 |
| 2023-06-30 | CVE-2023-37299 | Cross-site Scripting vulnerability in Joplin Project Joplin Joplin before 2.11.5 allows XSS via an AREA element of an image map. | 6.1 |
| 2023-01-31 | CVE-2022-45598 | Cross-site Scripting vulnerability in Joplin Project Joplin Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization. | 6.1 |
| 2022-06-16 | CVE-2021-33295 | Cross-site Scripting vulnerability in Joplin Project Joplin Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code due to improper sanitizing of html. | 3.5 |
| 2021-08-03 | CVE-2021-37916 | Cross-site Scripting vulnerability in Joplin Project Joplin Joplin before 2.0.9 allows XSS via button and form in the note body. | 4.3 |
| 2020-02-17 | CVE-2020-9038 | Cross-site Scripting vulnerability in Joplin Project Joplin Joplin through 1.0.184 allows Arbitrary File Read via XSS. | 3.5 |
| 2018-06-26 | CVE-2018-1000534 | Cross-site Scripting vulnerability in Joplin Project Joplin Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here https://github.com/laurent22/joplin/commit/494e235e18659574f836f84fcf9f4d4fcdcfcf89 that can result in executing unauthorized code within the rights in which the application is running. | 4.3 |