← All advisories

Medium severity5.4NVD Advisory· Published Apr 13, 2021· Updated Jun 17, 2026

CVE-2021-30637

CVE-2021-30637

Description

htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Danpros/Htmly2 versions
cpe:2.3:a:htmly:htmly:2.8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:htmly:htmly:2.8.0:*:*:*:*:*:*:*
- (no CPE)range: =2.8.0
htmly/htmlydescription

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/162195/htmly-2.8.0-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/danpros/htmly/issues/456nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.