What’s Vulnerable › Products

Typesetter vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Typesetter version is affected

Latest Typesetter vulnerabilities

• CVE-2025-71166 — Typesetter CMS Reflected XSS via Move Message Handling (CVSS 5.4)
• CVE-2025-71165 — Typesetter CMS Reflected XSS via Status.php (CVSS 5.4)
• CVE-2025-71164 — Typesetter CMS Reflected XSS via Editing.php (CVSS 5.4)
• CVE-2022-25523 — (CVSS 8.8)
• CVE-2020-19511 — (CVSS 6.1)
• CVE-2020-35126 — (CVSS 4.8)
• CVE-2020-25790 — (CVSS 7.2)
• CVE-2019-20077 — (CVSS 4.3)
• CVE-2018-16639 — (CVSS 5.4)
• CVE-2018-16626 — (CVSS 4.8)
• CVE-2018-16625 — (CVSS 4.8)
• CVE-2018-20837 — (CVSS 4.8)
• CVE-2018-6889 — (CVSS 8.8)
• CVE-2018-6888 — (CVSS 8.0)