CVE-2021-36702

The "content" field in the "regular post" page of the "add content" menu under "dashboard" in htmly 2.8.1 has a storage cross site scripting XSS vulnerability. It allows remote attackers to send authenticated post-http requests to add / content and inject arbitrary web scripts or HTML through...

htmly 跨站脚本漏洞

htmly is a simple and fast database-free PHP blogging platform and flat file CMS. htmly version 2.8.1 has a vulnerability in the "content" field of the "regular post" page in the "add content" menu of the dashboard. field of the "add content" menu in the dashboard is vulnerable to a stored...

PT-2021-21314

Name of the Vulnerable Software and Affected Versions htmly version 2.8.1 Description The issue concerns a storage cross-site scripting XSS vulnerability in the "content" field of the "regular post" page under the "add content" menu in the "dashboard". This vulnerability allows remote attackers t...