A vulnerability was found in TypiCMS up to 16.1.6. It has been rated as problematic. The impacted element is an unknown function of the component SVG Parser. Performing a manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-27621. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.