Lucene search
+L

7 matches found

NVD
NVD
•added 2026/01/23 11:15 p.m.•18 views

CVE-2026-24127

Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting XSS exists in the login error view template login.twig of versions 2.19.1 and below. The username value can be echoed back without proper contextual encoding when...

6.1CVSS0.00303EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/23 11:01 p.m.•49 views

CVE-2026-24127

CVE-2026-24127 pertains to Typemill, a flat-file CMS. A reflected XSS vulnerability exists in the login error view template login.twig affecting versions 2.19.1 and earlier, where the username value is echoed back without proper contextual encoding during failed authentication. This could allow a...

6.1CVSS5.8AI score0.00303EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2026/01/23 11:01 p.m.•12 views

CVE-2026-24127

Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting XSS exists in the login error view template login.twig of versions 2.19.1 and below. The username value can be echoed back without proper contextual encoding when...

6.1CVSS5.8AI score0.00303EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/01/23 11:01 p.m.•12 views

CVE-2026-24127 Typemill has Reflected XSS via login error view template

Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting XSS exists in the login error view template login.twig of versions 2.19.1 and below. The username value can be echoed back without proper contextual encoding when...

5.4CVSS5.5AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/01/23 11:01 p.m.•36 views

CVE-2026-24127 Typemill has Reflected XSS via login error view template

Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting XSS exists in the login error view template login.twig of versions 2.19.1 and below. The username value can be echoed back without proper contextual encoding when...

5.4CVSS0.00303EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•4 views

CVE-2026-24127: Improper Neutralization of Input During Web Page Generation

Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting XSS exists in the login error view template login.twig of versions 2.19.1 and below. The username value can be echoed back without proper contextual encoding when...

6.1CVSS5.8AI score0.00303EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•32 views

PT-2026-4535

Name of the Vulnerable Software and Affected Versions Typemill versions 2.19.1 and below Description Typemill is a flat-file, Markdown-based CMS for informational documentation websites. A reflected Cross-Site Scripting XSS issue exists in the login error view template login.twig. The username...

6.1CVSS6.1AI score0.00303EPSS
SaveExploits1References9
Rows per page
Query Builder