Threats tagged 'ghsa-wh4p-gf4j-mjqc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-120218Typemill · Cross-site Scripting Medium5.12026-11-01GCVE DatabaseCVE-2026-120218 A cross-site scripting (XSS) vulnerability exists in Typemill up to version 2.26.0 in the ControllerApiImage::saveImage function within SvgSanitizer.php. This flaw allows remote attackers to perform script injection via manipulated input. The issue is resolved by upgrading to Typemill version 2.27.0. Report on CVE-2026-120218 Vulnerability CWE-79 #ghsa-wh4p-gf4j-mjqc	GCVE Database	2026-11-01

Page 1 of 1