CVE-2022-25022

MediumCVSS 5.4

Published: 01/03/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.11%

62th percentile - higher than 62% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to execute arbitrary HTML scripts via a crafted payload in the content field of a blog post.

Risk Assessment

An attacker can inject malicious HTML code, leading to user session theft, website defacement, or sensitive data theft.

Recommendation

Immediately update Htmly to the latest version and implement input filtering and output encoding for content fields.

Original NVD description (English source)

A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post.