Typesetter
Approved changes feed: RSS · Atom
cpe:2.3:a:typesetter:typesetter:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Typesetter (bd926530-d757-5f4d-8a98-3e992229f885) |
|---|---|
| Product | Typesetter (c3683734-b509-5540-8a0b-177ac69a78aa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-71166 |
vulnerable | 2026-06-08 07:43:17.686664 |
Typesetter CMS Reflected XSS via Move Message Handling
Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools Status move message handling. The path parameter is reflected into the HTML output without proper output encoding in include/admin/Tools/Status.php. An authenticated attacker can supply crafted input containing HTML or JavaScript, resulting in arbitrary script execution in the context of an authenticated user's browser session.
Published: 2026-01-14T18:28:40.633Z
Updated: 2026-07-14T22:26:05.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71165 |
vulnerable | 2026-06-08 07:43:17.686289 |
Typesetter CMS Reflected XSS via Status.php
Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in include/admin/Tools/Status.php. An authenticated attacker can supply crafted input containing HTML or JavaScript, resulting in arbitrary script execution in the context of an authenticated user's browser session.
Published: 2026-01-14T18:28:21.375Z
Updated: 2026-07-14T22:26:04.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71164 |
vulnerable | 2026-06-08 07:43:17.684793 |
Typesetter CMS Reflected XSS via Editing.php
Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Editing component. The images parameter (submitted as images[] in a POST request) is reflected into an HTML href attribute without proper context-aware output encoding in include/tool/Editing.php. An authenticated attacker with editing privileges can supply a JavaScript pseudo-protocol (e.g., javascript:) to trigger arbitrary JavaScript execution in the context of the victim's browser session.
Published: 2026-01-14T18:27:45.418Z
Updated: 2026-07-14T22:26:03.984Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.