All 7 CVE vulnerabilities found in typemill, with AI-generated Chinese analysis, references, and POCs.
Vendor: typemill
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-120218 | Typemill SvgSanitizer.php saveImage cross site scripting CWE-79 | 3.5 | Low | 2026-11-01 |
| CVE-2026-53468 | Typemill has Stored HTML Attribute Injection in Metadata Fields CWE-79 | 4.6 | Medium | 2026-08-21 |
| CVE-2026-71518 | Typemill < 2.26.0 Authorization Bypass via Media File Download Route CWE-863 | 7.5 | High | 2026-08-17 |
| CVE-2026-44401 | Typemill CMS 2.x Persistent XSS via Markdown javascript URI CWE-79 | 4.8 | Medium | 2026-08-10 |
| CVE-2026-71213 | typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brute-Force CWE-307 | 9.1 | Critical | 2026-08-05 |
| CVE-2026-49133 | Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia() CWE-22 | 6.5 | Medium | 2026-06-17 |
| CVE-2026-24127 | Typemill has Reflected XSS via login error view template CWE-79 | 5.4 | Medium | 2026-01-23 |
All 7 known CVE vulnerabilities affecting typemill with full Chinese analysis, references, and POCs where available.