~ / search / GHSA-7grw-xfx6-qhx6

GHSA-7grw-xfx6-qhx6

Joplin Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-37298

Packages

EcosystemPackageAffectedFixed in
npm joplin < 2.11.5 2.11.5

Details

As written in the advisory (Markdown source, shown as plain text).

Joplin before 2.11.5 allows XSS via a USE element in an SVG document.

References

External links from the advisory. They lead to third-party sites.