<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: typemill</title><description>Every new CVE for typemill.</description><link>https://agentprime.io/</link><item><title>CVE-2026-120218: Typemill SvgSanitizer.php saveImage cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-120218/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-120218/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 01 Nov 2026 06:30:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53468: Typemill has Stored HTML Attribute Injection in Metadata Fields</title><link>https://agentprime.io/advisories/CVE-2026-53468/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53468/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Aug 2026 21:16:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71518: Typemill &lt; 2.26.0 Authorization Bypass via Media File Download Route</title><link>https://agentprime.io/advisories/CVE-2026-71518/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71518/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Aug 2026 21:05:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44401: Typemill CMS 2.x Persistent XSS via Markdown javascript URI</title><link>https://agentprime.io/advisories/CVE-2026-44401/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44401/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 19:29:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71213: typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brute-Force</title><link>https://agentprime.io/advisories/CVE-2026-71213/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71213/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 06:59:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-49133: Typemill &lt; 2.24.0 Path Traversal via ControllerApiImage::getPagemedia()</title><link>https://agentprime.io/advisories/CVE-2026-49133/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-49133/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 17 Jun 2026 20:39:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24127: Typemill has Reflected XSS via login error view template</title><link>https://agentprime.io/advisories/CVE-2026-24127/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24127/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jan 2026 23:01:15 GMT</pubDate><category>CVE</category></item></channel></rss>