Threats tagged 'ghsa-42cc-qc2r-r9fj'

HTMLy version 3.1.1 contains a Cross-Site Scripting (XSS) vulnerability in its content creation feature at the /add/content?type=image endpoint. This flaw arises from improper sanitization of user input, enabling injection of arbitrary code. The vulnerability has a high severity with a CVSS score of 8.9, indicating significant potential impact on confidentiality, integrity, and availability.