CVE-2020-28249

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Joplin 1.2.6 - 'link' Cross Site Scripting2020-11-09 · webapps · multiple

Impact

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/fhlip0/JopinXSS
• https://github.com/laurent22/joplin/releases
• https://github.com/fhlip0/JopinXSS
• https://github.com/laurent22/joplin/releases