Typesetter

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-71166 MEDIUM POC This Month

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools Status move message handling. [CVSS 5.4 MEDIUM]

PHP XSS Typesetter

NVD GitHub

CVSS 3.1

5.4

EPSS

0.0%

CVE-2025-71165 MEDIUM POC This Month

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php. [CVSS 5.4 MEDIUM]

PHP XSS Typesetter

NVD GitHub

CVSS 3.1

5.4

EPSS

0.0%

CVE-2025-71164 MEDIUM POC This Month

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Editing component. [CVSS 5.4 MEDIUM]

PHP XSS Typesetter

NVD GitHub

CVSS 3.1

5.4

EPSS

0.0%

CVE-2025-71166

EPSS 0% CVSS 5.4

MEDIUM POC This Month

PHP XSS Typesetter

NVD GitHub

CVE-2025-71165

EPSS 0% CVSS 5.4

MEDIUM POC This Month

PHP XSS Typesetter

NVD GitHub

CVE-2025-71164

EPSS 0% CVSS 5.4

MEDIUM POC This Month

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Editing component. [CVSS 5.4 MEDIUM]

PHP XSS Typesetter

NVD GitHub