Cross-site Scripting

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete featur…CVE-2019-8349Htmly · 2.2% likely

   CWE-79

2. htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.CVE-2021-30637Htmly · 1.9% likely

   CWE-79

3. A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post.CVE-2022-25022Htmly · 1.1% likely

   CWE-79

4. htmly Edit Profile Module cross site scriptingCVE-2022-1087Htmly · CVSS 3.5 · 0.9% likely

   CWE-79

5. The "blog title" field in the "Settings" menu "config" page of "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS) vulnerability. It allows remote attackers to sen…CVE-2021-36703Htmly · 0.9% likely

   CWE-79

6. The "content" field in the "regular post" page of the "add content" menu under "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS) vulnerability. It allows remote…CVE-2021-36702Htmly · 0.9% likely

   CWE-79

7. A Cross Site Scripting (XSS) vulnerability exists in DanPros htmly 2.8.1 via the Description field in (1) admin/config, and (2) index.php pages.CVE-2021-42867Htmly · 0.6% likely

   CWE-79

8. A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page.CVE-2021-42946Htmly · 0.6% likely

   CWE-79

9. A stored cross-site scripting (XSS) vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name param…CVE-2024-30953Htmly · CVSS 6.1 · 0.4% likely

   CWE-79

10. htmly v3.0.8 is vulnerable to Cross Site Scripting (XSS) in the /author/:name endpoint of the affected application. The name parameter is not properly sanitized before being refle…CVE-2025-56154Htmly · CVSS 6.1 · 0.3% likely

    CWE-79

11. htmly Custom Field post cross site scriptingCVE-2025-10758Htmly · CVSS 2.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.