CyberRota Analysis
AI-GeneratedThe persistent cross-site scripting vulnerability in Typemill CMS version 2.x affects the Markdown parser extension, allowing authenticated users with theme-configuration access to inject malicious JavaScript URIs via unsanitized href values in Markdown links. This can lead to session cookie theft, authenticated request forgery, and credential harvesting for any visitor who interacts with the crafted links. Organizations using Typemill CMS should prioritize patching this vulnerability to protect their users and maintain the integrity of their web applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdown links using the javascript: scheme through ParsedownExtension.php or TwigMarkdownExtension.php, storing a persistent payload that executes in the browser of every visitor who clicks the link, enabling session cookie theft, authenticated request forgery, and credential harvesting.