Skip to content
OpenAdvisories

Vendor

typemill

6 known vulnerabilities.

Products

typemill 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-71518 Public exploit

    Typemill < 2.26.0 Authorization Bypass via Media File Download Route

    Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants. Attackers can substitute normalized path forms …

    typemill typemill
  • Medium 4.8
    CVE-2026-44401 Public exploit

    Typemill CMS 2.x Persistent XSS via Markdown javascript URI

    Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Mark…

    typemill typemill