CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-01
Typemill Stored Cross-Site Scripting (XSS) via SVG Upload Vulnerability (CVE-2026-120218)
[Affected Scope] Typemill versions up to and including 2.26.0
[Impact] Remote authenticated attackers can upload malicious SVG files to execute arbitrary JavaScript in the victim's browser context
[Mitigation] Upgrade immediately to Typemill version 2.27.0 or later