Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint. The application fails to properly sanitize user input, allowing injection of arbitrary code
CVSS
No CVSS.
References
Configurations
No configuration.
History
29 Apr 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Chittu13/cve-research/blob/main/CVE-2026-38949/README.md - |
28 Apr 2026, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-28 19:37
Updated : 2026-04-29 16:16
NVD link : CVE-2026-38949
Mitre link : CVE-2026-38949
CVE.ORG link : CVE-2026-38949
JSON object : View
Products Affected
No product.
CWE
No CWE.