← back
CVE-2020-15930

CVE-2020-15930

EPSS 4.4%
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/159316/Joplin-1.0.245-Cross-Site-Scripting-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/48837unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/159316/Joplin-1.0.245-Cross-Site-Scripting-Code-Execution.htmlhttps://github.com/laurent22/joplin/issues/3552https://github.com/laurent22/joplin/releases/tag/v1.1.4