CVE-2020-23766

6.5 mediumEPSS 1.4%

Medium (6.5) in htmly htmly. EPSS 1.4% chance of exploitation in the next 30 days.

An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileges.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-05-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

htmly:htmly

References

https://github.com/danpros/htmly/issues/412
https://github.com/danpros/htmly/issues/412

Check your stack JSON