HTMLy Cross-Site Scripting Vulnerability (CNVD-2022-82256)

A cross-site scripting vulnerability exists in HTMLy version 2.8.1, which originates in the “description” field of the admin/config and index.php pages. The vulnerability can be exploited to execute malicious code, tamper with the page to conduct phishing attacks, and trick users into logging in again and then obtaining their login credentials.