CVE-2025-24028

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vulnerability is caused by differences between how Joplin's HTML sanitizer handles comments and how the browser handles comments. This affects both the Rich Text Editor and the Markdown viewer. However, unlike the Rich Text Editor, the Markdown viewer is `cross-origin isolated`, which prevents JavaScript from directly accessing functions/variables in the toplevel Joplin `window`. This issue is not present in Joplin 3.1.24 and may have been introduced in `9b50539`. This is an XSS vulnerability that impacts users that open untrusted notes in the Rich Text Editor. This vulnerability has been addressed in version 3.2.12 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-79

• https://github.com/laurent22/joplin/commit/2a058ed8097c2502e152b26394dc1917897f5817Patch
• https://github.com/laurent22/joplin/commit/9b505395918bc923f34fe6f3b960bb10e8cf234ePatch
• https://github.com/laurent22/joplin/security/advisories/GHSA-5w3c-wph9-hq92Exploit, Vendor Advisory
• https://joplinapp.org/help/dev/spec/note_viewer_isolationProduct
• https://github.com/laurent22/joplin/security/advisories/GHSA-5w3c-wph9-hq92Exploit, Vendor Advisory

Published

Feb 7, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24022iTop is an web based IT Service Management tool. Prior to ve…8.5
• CVE-2025-24023Flask-AppBuilder is an application development framework. Pr…5.3
• CVE-2025-24024Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 resp…9.1
• CVE-2025-24025Coolify is an open-source and self-hostable tool for managin…6.1
• CVE-2025-24026iTop is an web based IT Service Management tool. Versions pr…5.3
• CVE-2025-24027ps_contactinfo, a PrestaShop module for displaying store con…6.2
• CVE-2025-24029Tuleap is an Open Source Suite to improve management of soft…5.3
• CVE-2025-2403A denial-of-service vulnerability due to improper prioritiza…8.7
• CVE-2025-24030Envoy Gateway is an open source project for managing Envoy P…7.1
• CVE-2025-24031PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 …5.1
• CVE-2025-24032PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 …9.2
• CVE-2025-24033@fastify/multipart is a Fastify plugin for parsing the multi…7.5