2021-08-02 23:35:37
mitre
PUBLISHED
Joplin before 2.0.9 allows XSS via button and form in the note body.