CVE-2022-45598

6.1 mediumEPSS 0.5%

Medium (6.1) in joplin project joplin. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in joplin 2.9.17.

Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization.

Severity

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-01-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-h6c2-879r-jffh	npm	joplin	<2.9.17	2.9.17