danpros HTMLy

• CVE-2026-18646 Medium 5.3 danpros HTMLy Author Name htmly.php path traversal 0.8%
• CVE-2026-18645 Medium 5.4 danpros HTMLy Admin Content Endpoint admin.php add_content path traversal 0.5%
• CVE-2026-18644 Medium 5.4 danpros HTMLy Delete Username Endpoint htmly.php unlink path traversal 0.5%
• CVE-2026-57940 Low 2.1 HTMLy 3.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the RSS feed import functionality. The function get_feed() in system/admin/admin.php passes user-supplied $feed_url directly 0.4%
• CVE-2026-45233 High 8.1 HTMLy CMS 3.1.1 Path Traversal via oldfile Parameter in Autosave 0.9%