CVE-2022-28053

8.8 highEPSS 1.3%

High (8.8) in typemill typemill. EPSS 1.3% chance of exploitation in the next 30 days.

Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2022-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

typemill:typemill

References

https://github.com/typemill/typemill/issues/325
https://github.com/typemill/typemill/issues/325

Check your stack JSON