CVE-2026-53468

Name of the Vulnerable Software and Affected Versions Typemill versions prior to 2.23.0

Description Typemill is a flat-file, Markdown-based content management system for informational documentation websites. The software contains a stored HTML attribute injection flaw in the page metadata fields og:title and og:description. An authenticated user with permissions to modify page metadata can inject arbitrary HTML attributes into generated <meta> tags because of missing output encoding. This may lead to stored cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites, under specific browser or DOM interaction scenarios.

Recommendations Update to version 2.23.0.