Filtered by vendor Danpros Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-38949 1 Danpros 1 Htmly 2026-04-29 N/A
Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint. The application fails to properly sanitize user input, allowing injection of arbitrary code