CVE-2021-36702

The "content" field in the "regular post" page of the "add content" menu under "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS)…

published August 3, 2021

CVSS
—
EPSS
1%
Percentile
60.3
In the wild
Unconfirmed
What it is

The "content" field in the "regular post" page of the "add content" menu under "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS) vulnerability. It allows remote attackers to send authenticated post-http requests to add / content and inject arbitrary web scripts or HTML through special content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00931 · 60.3th percentile
Published
2021-08-03T18:03Z
EPSS history
Timeline
  • 03 AUG 18:03Z
    The "content" field in the "regular post" page of the "add content" menu under "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS)…
    cvelistv5