Skip to content
OpenAdvisories

Vendor

typemill

6 known vulnerabilities.

Products

typemill 6
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.6
    CVE-2026-53468

    Typemill has Stored HTML Attribute Injection in Metadata Fields

    Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites. Versions prior to 2.23.0 are vulnerable to stored HTML attribute injection in the page metadata fields (`og:title` and `og:description`). An a…

    typemill typemill
  • Medium 4.8
    CVE-2026-44401 Public exploit

    Typemill CMS 2.x Persistent XSS via Markdown javascript URI

    Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Mark…

    typemill typemill
  • Medium 6.5
    CVE-2026-49133

    Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()

    Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storag…

    typemill typemill
  • Medium 5.4
    CVE-2026-24127

    Typemill has Reflected XSS via login error view template

    Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting (XSS) exists in the login error view template `login.twig` of versions 2.19.1 and below. The `username` value can be echoed back wi…

    typemill typemill