CVE-2026-120218Low· 3.5▾ TwilightPoC availableA flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing a manipulation can lead to cross site scripting. The attack…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 19.3 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
1 GitHub repo (last check)
A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 2.27.0 is sufficient to resolve this issue. This patch is called 9ca43c4a7b6764c5a6ac11a2ccc099b036ee3cef. It is recommended to upgrade the affected component.
Typemill 2.0Typemill 2.1Typemill 2.2Typemill 2.3Typemill 2.4Typemill 2.5Typemill 2.6Typemill 2.7Typemill 2.8Typemill 2.9Typemill 2.10Typemill 2.11Typemill 2.12Typemill 2.13Typemill 2.14Typemill 2.15Typemill 2.16Typemill 2.17Typemill 2.18Typemill 2.19Typemill 2.20Typemill 2.21Typemill 2.22Typemill 2.23Typemill 2.24Typemill 2.25Typemill 2.26.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-71518High· 7.5Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants
CVE-2020-3580Medium· 6.1Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting …
CVE-2015-20130Medium· 6.1Netsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php
CVE-2020-11022Medium· 6.9jQuery has a potential XSS vulnerability
CVE-2016-20084High· 7.2WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS
CVE-2013-20009Medium· 4.8Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter