Priority MEDIUM 54
Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites.
Vulnerabilities
7 records
TI-2026-50117 CVE-2026-71518 · GHSA-rw94-73mp-v8hw
Typemill < 2.26.0 Authorization Bypass via Media File Download Route
Priority MEDIUM 44
Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants.
TI-2026-32346 CVE-2026-44401 · GHSA-8vfw-vh7q-p649
Typemill CMS 2.x Persistent XSS via Markdown javascript URI
Priority LOW 21
Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by su…
TI-2026-49888 CVE-2026-71213 · GHSA-4265-6rqg-273h
typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brute-Force
Priority MEDIUM 48
Typemill's login endpoint (POST /tm/login, ControllerWebAuth::login) performs no rate-limiting, failed-attempt counting, or account lockout when captcha is disabled, which is the default configuration.
TI-2026-36348 CVE-2026-49133 · GHSA-pvj2-mj22-xxmq
Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()
Priority LOW 31
Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in th…
Priority LOW 27
Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites.
TI-2022-10879 CVE-2022-28053 · GHSA-9wvw-89vx-ppr3
Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the…
Priority MEDIUM 41
Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function.