CVE-2024-34191

Published: 2024-05-14T16:17Z

Last Modified: 2024-11-21T09:18Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the delete_post() function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt