CVE-2026-53468
Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites.
Published Aug 21, 2026 · updated Oct 14, 2026
Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites. Versions prior to 2.23.0 are vulnerable to stored HTML attribute injection in the page metadata fields ( and ). An authenticated user with permission to modify page metadata can inject arbitrary HTML attributes into generated tags due to missing output encoding. Under certain browser or DOM interaction scenarios, this may lead to stored cross-site scripting (XSS). Version 2.23.0 fixes the issue.
Timeline
Detection, updates, and resolution for this record.
Aug 21, 2026 · NIST NVD
Detected
Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites. Versions prior to 2.23.0 are vulnerable to stored HTML attribute injection in the page metadata fields ( and ). An authenticated user with permission to modify page metadata can inject arbitrary HTML attributes into generated tags due to missing output encoding. Under certain browse
Oct 14, 2026 · NIST NVD
Updated
Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites. Versions prior to 2.23.0 are vulnerable to stored HTML attribute injection in the page metadata fields ( and ). An authenticated user with permission to modify page metadata can inject arbitrary HTML attributes into generated tags due to missing output encoding. Under certain browse
Sources
- CVE.orgCVE-2026-53468
Official CVE identifier
cve.org - NIST NVDCVE-2026-53468
Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites. Versions prior to 2.23.0 are vulnerable to stored HTML attribute injection in the page metadata fields ( and ). An authenticated user wit
nvd.nist.gov