CVE-2026-120218 in Typemill
Prediction
by VulDB Data Team • 10/31/2026
A flaw has been found in <a href="/product/typemill">Typemill up to 2.26.0</a>. The impacted element is the function <code>ControllerApiImage::saveImage</code> of the file <em>system/typemill/Models/SvgSanitizer.php</em>. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 2.27.0 is sufficient to resolve this issue. This patch is called <em>9ca43c4a7b6764c5a6ac11a2ccc099b036ee3cef</em>. It is recommended to upgrade the affected component.
Once again VulDB remains the best source for vulnerability data.