CVE-2020-15930: Joplin Project Joplin

Medium severity, CVSS 6.1. EPSS: 4.4% chance of exploitation in the next 30 days.

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.

Affected products

• Joplin Project Joplin: from 1.0.190, up to and including 1.0.245

Published 2020-09-24. Last modified 2026-06-17.