Lucene search

K
HtmlyHtmly

14 matches found

CVE
CVE
added 2021/04/13 5:15 a.m.88 views

CVE-2021-30637

htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.

5.4CVSS5.2AI score0.00148EPSS
CVE
CVE
added 2021/05/21 6:15 p.m.74 views

CVE-2020-23766

An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileges.

6.5CVSS6.6AI score0.01518EPSS
CVE
CVE
added 2022/03/01 2:15 a.m.71 views

CVE-2022-25022

A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post.

5.4CVSS5.3AI score0.00648EPSS
CVE
CVE
added 2024/05/14 4:17 p.m.64 views

CVE-2024-34191

htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the delete_post() function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request.

6.5CVSS7.2AI score0.00447EPSS
CVE
CVE
added 2022/03/29 6:15 a.m.60 views

CVE-2022-1087

A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module. The manipulation of the field Title with script tags leads to persistent cross site scripting. The attack may be initiated remotely and requires an authentication. A sim...

5.4CVSS4.5AI score0.003EPSS
CVE
CVE
added 2022/03/31 6:15 p.m.56 views

CVE-2021-42946

A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page.

4.8CVSS4.9AI score0.00223EPSS
CVE
CVE
added 2022/09/30 6:15 p.m.54 views

CVE-2021-33354

Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform arbitrary file deletions via modified file parameter.

8.1CVSS8AI score0.00601EPSS
CVE
CVE
added 2022/03/31 6:15 p.m.52 views

CVE-2021-42867

A Cross Site Scripting (XSS) vulnerability exists in DanPros htmly 2.8.1 via the Description field in (1) admin/config, and (2) index.php pages.

4.8CVSS4.9AI score0.00223EPSS
CVE
CVE
added 2021/08/03 7:15 p.m.46 views

CVE-2021-36702

The "content" field in the "regular post" page of the "add content" menu under "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS) vulnerability. It allows remote attackers to send authenticated post-http requests to add / content and inject arbitrary web scripts or HTML through spe...

6.1CVSS5.9AI score0.00196EPSS
CVE
CVE
added 2021/08/03 7:15 p.m.45 views

CVE-2021-36703

The "blog title" field in the "Settings" menu "config" page of "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS) vulnerability. It allows remote attackers to send an authenticated post HTTP request to admin/config and inject arbitrary web script or HTML through a special website n...

6.1CVSS5.9AI score0.00222EPSS
CVE
CVE
added 2022/08/26 1:15 p.m.44 views

CVE-2021-40285

htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php.

8.1CVSS8.1AI score0.00084EPSS
CVE
CVE
added 2024/04/17 7:15 p.m.42 views

CVE-2024-30953

A stored cross-site scripting (XSS) vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module.

6.1CVSS5.6AI score0.0014EPSS
CVE
CVE
added 2021/08/03 7:15 p.m.39 views

CVE-2021-36701

In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary know files on the host.

9.1CVSS8.9AI score0.00872EPSS
CVE
CVE
added 2019/05/08 2:29 p.m.37 views

CVE-2019-8349

Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete feature; the (2) destination parameter to edit feature; (3) content parameter in the profile feature.

6.1CVSS6AI score0.00113EPSS