Htmly Htmly vulnerabilities

• htmly htmly v3.0.8 is vulnerable to Cross Site Scripting (XSS) in the /author/:name endpoint of the... CVE-2025-56154 6.1 MediumOctober 2, 2025
• htmly htmly Custom Field post cross site scripting CVE-2025-10758 4.8 MediumSeptember 21, 2025
• htmly htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the... CVE-2024-34191 6.5 MediumMay 14, 2024
• htmly A stored cross-site scripting (XSS) vulnerability in Htmly v2.9.5 allows attackers to execute... CVE-2024-30953 6.1 MediumApril 17, 2024
• htmly Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform... CVE-2021-33354 8.1 HighSeptember 30, 2022
• htmly htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component... CVE-2021-40285 8.1 HighAugust 26, 2022
• htmly A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the ... CVE-2021-42946 4.8 MediumMarch 31, 2022
• htmly A Cross Site Scripting (XSS) vulnerability exists in DanPros htmly 2.8.1 via the Description... CVE-2021-42867 4.8 MediumMarch 31, 2022
• htmly htmly Edit Profile Module cross site scripting CVE-2022-1087 3.5 LowMarch 29, 2022
• htmly A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary... CVE-2022-25022 Public exploit 5.4 MediumMarch 1, 2022
• htmly The "blog title" field in the "Settings" menu "config" page of "dashboard" in htmly 2.8.1 has a... CVE-2021-36703 6.1 MediumAugust 3, 2021
• htmly The "content" field in the "regular post" page of the "add content" menu under "dashboard" in... CVE-2021-36702 6.1 MediumAugust 3, 2021
• htmly In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete... CVE-2021-36701 9.1 CriticalAugust 3, 2021
• htmly An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote... CVE-2020-23766 6.5 MediumMay 21, 2021
• htmly htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php. CVE-2021-30637 Public exploit 5.4 MediumApril 13, 2021
• htmly Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to... CVE-2019-8349 6.1 MediumMay 8, 2019