Description
Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization.
Remediation
References
https://github.com/laurent22/joplin/releases/tag/v2.9.17
https://github.com/laurent22/joplin/commit/a2de167b95debad83a0f0c7925a88c0198db812e
Related Vulnerabilities
CVE-2018-7408 Vulnerability in npm package npm
CVE-2019-10749 Vulnerability in npm package sequelize
CVE-2018-1230 Vulnerability in maven package org.springframework.batch:spring-batch-admin
CVE-2021-35513 Vulnerability in npm package mermaid
CVE-2021-41182 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery-ui