Vulnerabilities > Htmly
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-04-13 | CVE-2021-30637 | Cross-site Scripting vulnerability in Htmly 2.8.0 htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php. | 5.4 |
| 2019-05-08 | CVE-2019-8349 | Cross-site Scripting vulnerability in Htmly 2.7.4 Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete feature; the (2) destination parameter to edit feature; (3) content parameter in the profile feature. | 6.1 |