Vulnerabilities

TI-2026-15279 CVE-2026-18646 · GHSA-pq92-gfff-99hc

danpros HTMLy Author Name htmly.php path traversal

HIGH 70

A weakness has been identified in danpros HTMLy up to 3.1.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00767 Published 2026-08-03 No fix listed CWE-22

TI-2026-15278 CVE-2026-18645 · GHSA-4pgp-58q4-x4mw

danpros HTMLy Admin Content Endpoint admin.php add_content path traversal

MEDIUM 57

A security flaw has been discovered in danpros HTMLy up to 3.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00542 Published 2026-08-03 No fix listed CWE-22

TI-2026-15277 CVE-2026-18644 · GHSA-g2qx-6r2x-hr8v

danpros HTMLy Delete Username Endpoint htmly.php unlink path traversal

MEDIUM 57

A vulnerability was identified in danpros HTMLy up to 3.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00542 Published 2026-08-03 No fix listed CWE-22

TI-2026-41706 CVE-2026-57940 · GHSA-fpm8-6xjp-2hq8

Server-side request forgery in danpros HTMLy

LOW 11

HTMLy 3.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the RSS feed import functionality.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00388 Published 2026-06-26 No fix listed CWE-918

TI-2026-33048 CVE-2026-45233 · GHSA-mhrm-pq8h-qmf3

HTMLy CMS 3.1.1 Path Traversal via oldfile Parameter in Autosave

LOW 33

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the ad…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.009 Published 2026-06-25 No fix listed CWE-22