HTMLy Cross-Site Scripting Vulnerability (CNVD-2022-82257)

A cross-site scripting vulnerability exists in HTMLy version 2.8.1, which stems from the presence of a “copyright” field in the /admin/config page. The vulnerability can be exploited to execute malicious code, tamper with the page to conduct phishing attacks, and trick users into logging in again and then obtaining their login credentials.