CVE-2020-9038

Joplin through 1.0.184 allows Arbitrary File Read via XSS.
Source: NIST
CVE-2020-9038