Htmly

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

1. Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete featur…CVE-2019-8349Htmly · 2.2% likely

   CWE-79

2. htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.CVE-2021-30637Htmly · 1.9% likely

   CWE-79

3. In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow a remote attacker to delete arbitrary k…CVE-2021-36701Htmly · 1.6% likely
4. Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform arbitrary file deletions via modified file parameter.CVE-2021-33354Htmly · CVSS 8.1 · 1.6% likely

   CWE-22

5. An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Ad…CVE-2020-23766Htmly · 1.4% likely

   CWE-22

6. A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post.CVE-2022-25022Htmly · 1.1% likely

   CWE-79

7. htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php.CVE-2021-40285Htmly · 1.0% likely

   CWE-22

8. htmly Edit Profile Module cross site scriptingCVE-2022-1087Htmly · CVSS 3.5 · 0.9% likely

   CWE-79

9. The "blog title" field in the "Settings" menu "config" page of "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS) vulnerability. It allows remote attackers to sen…CVE-2021-36703Htmly · 0.9% likely

   CWE-79

10. The "content" field in the "regular post" page of the "add content" menu under "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS) vulnerability. It allows remote…CVE-2021-36702Htmly · 0.9% likely

    CWE-79

11. A Cross Site Scripting (XSS) vulnerability exists in DanPros htmly 2.8.1 via the Description field in (1) admin/config, and (2) index.php pages.CVE-2021-42867Htmly · 0.6% likely

    CWE-79

12. A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page.CVE-2021-42946Htmly · 0.6% likely

    CWE-79

13. htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the delete_post() function at admin.php. This vulnerability allows attackers to delete arbitrar…CVE-2024-34191Htmly · CVSS 6.5 · 0.5% likely

    CWE-35

14. A stored cross-site scripting (XSS) vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name param…CVE-2024-30953Htmly · CVSS 6.1 · 0.4% likely

    CWE-79

15. htmly v3.0.8 is vulnerable to Cross Site Scripting (XSS) in the /author/:name endpoint of the affected application. The name parameter is not properly sanitized before being refle…CVE-2025-56154Htmly · CVSS 6.1 · 0.3% likely

    CWE-79

16. htmly Custom Field post cross site scriptingCVE-2025-10758Htmly · CVSS 2.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.