Cross-site scripting in Joplin

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-28249 · ADVISORY
• laurent22/joplin commit fd90a49 · WEB
• fhlip0/JopinXSS · WEB
• laurent22/joplin release v1.3.11 · WEB
• npmjs.com/package/joplin · WEB
• laurent22/joplin release · Third Party Advisory

joplin 的其他漏洞

• CVE-2025-27409高危 7.5Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to…
• CVE-2025-27134高危 8.8Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to…
• CVE-2025-25187中危 5.4Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vul…
• CVE-2025-24028严重 9.6Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vul…
• CVE-2024-55630中危 5.5Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Joplin's…