Skip to content
OpenAdvisories

Vendor

Typesetter

3 known vulnerabilities.

Products

Typesetter 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-71166

    Typesetter CMS Reflected XSS via Move Message Handling

    Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper out…

    Typesetter Typesetter
  • Medium 4.8
    CVE-2025-71165

    Typesetter CMS Reflected XSS via Status.php

    Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output en…

    Typesetter Typesetter
  • Medium 4.8
    CVE-2025-71164

    Typesetter CMS Reflected XSS via Editing.php

    Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Editing component. The images parameter (submitted as images[] in a POST request) is reflected into an HTML href attribute without proper conte…

    Typesetter Typesetter