TI-2026-15279 CVE-2026-18646 · GHSA-pq92-gfff-99hc
danpros HTMLy Author Name htmly.php path traversal
Priority HIGH 70
A weakness has been identified in danpros HTMLy up to 3.1.1.
danpros
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
danpros records in CISA KEVNo danpros vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-15278 CVE-2026-18645 · GHSA-4pgp-58q4-x4mw
danpros HTMLy Admin Content Endpoint admin.php add_content path traversal
Priority MEDIUM 57
A security flaw has been discovered in danpros HTMLy up to 3.1.1.
TI-2026-15277 CVE-2026-18644 · GHSA-g2qx-6r2x-hr8v
danpros HTMLy Delete Username Endpoint htmly.php unlink path traversal
Priority MEDIUM 57
A vulnerability was identified in danpros HTMLy up to 3.1.1.
TI-2026-33048 CVE-2026-45233 · GHSA-mhrm-pq8h-qmf3
HTMLy CMS 3.1.1 Path Traversal via oldfile Parameter in Autosave
Priority LOW 33
HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the ad…
TI-2026-41706 CVE-2026-57940 · GHSA-fpm8-6xjp-2hq8
Server-side request forgery in danpros HTMLy
Priority LOW 11
HTMLy 3.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the RSS feed import functionality.