HTMLy vulnerabilities

1 known vulnerability in HTMLy from Danpros. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  htmly: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-45233Jun 25, 2026Danpros

  HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to relocate arbitrary files by supplying directory traversal sequences in the oldfile parameter at the admin autosave endpoint. Attackers can pas