Skip to content
OpenAdvisories

Vendor

typemill

6 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-44401 Public exploit

    Typemill CMS 2.x Persistent XSS via Markdown javascript URI

    Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Mark…