What is GHSA-f8gq-852c-wf3c?

GHSA-f8gq-852c-wf3c is a security advisory published by GitHub Security Advisories with Medium severity. A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary...

Which CVE IDs does GHSA-f8gq-852c-wf3c cover?

GHSA-f8gq-852c-wf3c covers the following CVE IDs: CVE-2022-25022. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f8gq-852c-wf3c?

GHSA-f8gq-852c-wf3c has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-f8gq-852c-wf3cMediumCVSS 5.4

A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary...

Vendor

GitHub Security Advisories

Published

March 2, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2022-25022 →

📋 Description

A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2022-25022
https://github.com/MoritzHuppert/CVE-2022-25022/blob/main/CVE-2022-25022.pdf
https://youtu.be/acookTqf3Nc
http://danpros.com
http://htmly.com
https://www.cvedetails.com/cve/CVE-2021-36703
https://github.com/advisories/GHSA-f8gq-852c-wf3c