VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 3, 2021· Updated Jun 17, 2026

CVE-2021-36703

CVE-2021-36703

Description

The "blog title" field in the "Settings" menu "config" page of "dashboard" in htmly 2.8.1 has a storage cross site scripting (XSS) vulnerability. It allows remote attackers to send an authenticated post HTTP request to admin/config and inject arbitrary web script or HTML through a special website name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Danpros/Htmly2 versions
    cpe:2.3:a:htmly:htmly:2.8.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:htmly:htmly:2.8.1:*:*:*:*:*:*:*
    • (no CPE)range: =2.8.1
  • htmly/htmlydescription
  • Danpros/dashboardllm-create
    Range: =2.8.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.