Skip to content
OpenAdvisories

Product · TypiCMS

Core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-27621 Public exploit

    TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload

    TypiCMS is a multilingual content management system based on the Laravel framework. A Stored Cross-Site Scripting (XSS) vulnerability exists in the file upload module of TypiCMS prior to version 16.1.7. The application allows users with file upload permission…

    TypiCMS Core typicms/core Packagist