CVE-2026-120218 Typemill SvgSanitizer.php saveImage cross site scripting

Description

A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 2.27.0 is sufficient to resolve this issue. This patch is called 9ca43c4a7b6764c5a6ac11a2ccc099b036ee3cef. It is recommended to upgrade the affected component.

Exploitable remotely over the network, with an ordinary account and if a user takes an action; the impact on data or service is limited.

Attack vector

Network

Attack complexity

Low

Attack requirements

None

Privileges required

Low

Interaction

Passive

Confidentiality

None

Integrity

Low

Availability

None

Confidentiality of other systems

None

Integrity of other systems

None

Availability of other systems

None

Affected products and versions