{"action":"Upgrade joplin to 1.1.7 or later.","affected":[{"fixed":"1.1.7","introduced":"1.0.190"}],"component":"joplin","cve_ids":["CVE-2020-15930"],"ecosystem":"npm","epss":0.04377,"exploited":false,"fixed_versions":["1.1.7"],"ghsa_id":"GHSA-cgc7-mwp4-3ccx","id":"tcs_01M5KFJPNJ3A3TPYJ8RP9QWRNQ","modified_at":"2023-11-08T04:02:38.583521Z","published_at":"2021-05-07T16:29:05Z","references":["https://osv.dev/vulnerability/GHSA-cgc7-mwp4-3ccx","https://nvd.nist.gov/vuln/detail/CVE-2020-15930","https://github.com/laurent22/joplin/issues/3552","https://github.com/laurent22/joplin/commit/57d750bc9aeb0f98d53ed4b924458b54984c15ff","https://github.com/laurent22/joplin/releases/tag/v1.1.4","http://packetstormsecurity.com/files/159316/Joplin-1.0.245-Cross-Site-Scripting-Code-Execution.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cgc7-mwp4-3ccx","url":"https://osv.dev/vulnerability/GHSA-cgc7-mwp4-3ccx"}],"summary":"Cross-site Scripting in Joplin"}