CVE-2026-120218: Typemill SvgSanitizer.php saveImage cross site scripting

Published Nov 1, 2026

Updated

A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 2.27.0 is sufficient to resolve this issue. This patch is called 9ca43c4a7b6764c5a6ac11a2ccc099b036ee3cef. It is recommended to upgrade the affected component.

Event History

Nov 1, 2026

CVE Published

via MITRE·06:30 AM

Data Sourced

via MITRE·06:30 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Typemill versions need remediation?

Typemill versions up to and including 2.26.0 are affected. Upgrading to version 2.27.0 resolves the issue; the relevant patch is 9ca43c4a7b6764c5a6ac11a2ccc099b036ee3cef.

What level of access and interaction does exploitation require?

The supplied severity vector indicates that exploitation is remote and requires low privileges plus user interaction. Successful exploitation can affect integrity, while no confidentiality or availability impact is indicated.

Is there public exploit information available?

Yes. The vulnerability data states that an exploit has been published and may be used, so affected deployments should be prioritized for upgrade.

CVE-2026-120218: Typemill SvgSanitizer.php saveImage cross site scripting

Event History

Frequently Asked Questions

Which Typemill versions need remediation?

What level of access and interaction does exploitation require?

Is there public exploit information available?

Company

Resources

Contact

Frequently Asked Questions

Which Typemill versions need remediation?

What level of access and interaction does exploitation require?

Is there public exploit information available?