CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120218
LOWCVSS 3.5NVD feed
Published 1 November 2026 · tracked since 1 November 2026
Description
A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published a
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog