Priority HIGH 80
Joplin is a free, open source note taking and to-do application.
laurent22
Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
laurent22 records in CISA KEVNo laurent22 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
22 records in Joplin · all components
TI-2024-32950 CVE-2024-49362 · GHSA-hff8-hjwv-j9q7
Remote Code Execution on click of <a> Link in markdown preview
Priority HIGH 76
Joplin is a free, open source note taking and to-do application.
Priority HIGH 75
Joplin is a free, open source note taking and to-do application.
TI-2025-17795 CVE-2025-24028
Cross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in Joplin
Priority HIGH 74
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
Priority HIGH 73
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2024-35730 CVE-2024-53268
Lack of validation on openExternal allows 1 click remote code execution in joplin
Priority HIGH 73
Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS.
TI-2025-20244 CVE-2025-27409
Joplin Server Vulnerable to Path Traversal
Priority HIGH 72
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2025-18856 CVE-2025-25187
Cross-site Scripting in Goto Anything allows arbitrary code execution in Joplin
Priority HIGH 69
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2023-19886 CVE-2023-38506
Cross-site Scripting (XSS) when pasting HTML into the rich text editor in Joplin
Priority HIGH 69
Joplin is a free, open source note taking and to-do application.
Priority HIGH 69
Joplin is a free, open source note taking and to-do application.
Priority MEDIUM 58
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks.
TI-2022-07450 CVE-2022-23340 · GHSA-8478-53pv-jxvm
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
Priority MEDIUM 45
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
TI-2023-20649 CVE-2023-39517
Cross site scripting (XSS) when clicking on an untrusted `<map>` link in Joplin
Priority LOW 36
Joplin is a free, open source note taking and to-do application.
TI-2020-12543 CVE-2020-15930 · GHSA-cgc7-mwp4-3ccx
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.
Priority LOW 34
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.
TI-2020-17158 CVE-2020-28249 · GHSA-q26w-wjj2-22vv
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.
Priority LOW 33
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.
TI-2020-07254 CVE-2020-9038 · GHSA-6r7x-hc8m-985r
Joplin through 1.0.184 allows Arbitrary File Read via XSS.
Priority LOW 31
Joplin through 1.0.184 allows Arbitrary File Read via XSS.
TI-2018-15932 CVE-2018-1000534 · GHSA-m6mf-hmrh-ph4j
Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled…
Priority LOW 30
Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - inf…
TI-2021-15676 CVE-2021-37916 · GHSA-mrmf-755g-w2vw
Joplin before 2.0.9 allows XSS via button and form in the note body.
Priority LOW 29
Joplin before 2.0.9 allows XSS via button and form in the note body.
TI-2023-18929 CVE-2023-37299 · GHSA-4jjv-p8x9-rrf7
Joplin before 2.11.5 allows XSS via an AREA element of an image map.
Priority LOW 28
Joplin before 2.11.5 allows XSS via an AREA element of an image map.
TI-2023-18928 CVE-2023-37298 · GHSA-7grw-xfx6-qhx6
Joplin before 2.11.5 allows XSS via a USE element in an SVG document.
Priority LOW 28
Joplin before 2.11.5 allows XSS via a USE element in an SVG document.
TI-2022-22504 CVE-2022-45598 · GHSA-h6c2-879r-jffh
Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker…
Priority LOW 28
Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization.
TI-2021-12788 CVE-2021-33295 · GHSA-phj8-2p6x-hq5r
Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows…
Priority LOW 26
Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code due to improper sanitizing of html.