CVE-2026-18645

CVE-2026-18645 affects danpros HTMLy up to 3.1.1. The vulnerability resides in the Admin Content Endpoint: add_content in /system/admin/admin.php, where manipulating the oldfile argument enables path traversal. Vulnerability can be exploited remotely, and a public exploit is available. Vendor did...