CVE-2026-120218 | Typemill up to 2.26.0 SvgSanitizer.php saveImage cross site scripting

October 31, 2026 Yanac

A vulnerability was found in Typemill up to 2.26.0. It has been declared as problematic. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing a manipulation can lead to cross site scripting.

This vulnerability appears as CVE-2026-120218. The attack may be performed from remote. In addition, an exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More