CVE-2026-22858

creationtimestamp| type| source ---|---|--- 2026-01-14 18:38:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115894906438860835 2026-01-14 19:47:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcftk5xicw2y...

CVE-2025-71166

CVE-2025-71166 affects Typesetter CMS versions up to and including 5.1. The vulnerability is a reflected cross-site scripting (XSS) in the administrative interface, specifically in the Tools Status move message handling. The path parameter is reflected into HTML output without proper encoding in ...

CVE-2025-71166 Typesetter CMS Reflected XSS via Move Message Handling

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper output encoding in...

CVE-2025-71166

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper output encoding in...

EUVD-2026-2434

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper output encoding in...

CVE-2025-71166 Typesetter CMS Reflected XSS via Move Message Handling

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper output encoding in...

CVE-2025-71166 Typesetter CMS Reflected XSS via Move Message Handling

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper output encoding in...

CVE-2025-71165 Typesetter CMS Reflected XSS via Status.php

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...

CVE-2025-71165

Summary: Typesetter CMS

CVE-2025-71165

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...

CVE-2025-71165 Typesetter CMS Reflected XSS via Status.php

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...

CVE-2025-71165 Typesetter CMS Reflected XSS via Status.php

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...

EUVD-2026-2428

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php...

GHSA-3G2F-4RJG-9385

creationtimestamp| type| source ---|---|--- 2026-01-14 17:15:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115894579878017350 2026-01-24 21:25:03+00:00| seen| https://gist.github.com/alon710/6415b2515d3828512026474d72b46a73 2026-01-24 22:34:31+00:00| seen|...

CVE-2026-22263

creationtimestamp| type| source ---|---|--- 2026-01-14 17:13:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115894572299072531...

CVE-2026-22260

creationtimestamp| type| source ---|---|--- 2026-01-14 17:13:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115894572299072531...

CVE-2026-22264

creationtimestamp| type| source ---|---|--- 2026-01-14 17:13:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115894572299072531...

CVE-2026-0890

creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevvzt2i2i 2026-01-15 00:01:45+00:00| seen| https://bsky.app/profile/slackers.it/post/3mcgbr2z5jy2a 2026-01-15 15:20:09+00:00| seen|...

CVE-2026-0889

creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevvzt2i2i 2026-01-15 15:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mchv3bxl7m2s...

CVE-2026-0882

creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevvzt2i2i 2026-01-15 00:01:42+00:00| seen| https://bsky.app/profile/slackers.it/post/3mcgbqyshaj2x 2026-01-15 15:20:08+00:00| seen|...