A vulnerability was found in htmly 3.0.8. It has been classified as problematic. Impacted is an unknown function of the file /author/:name. Performing manipulation of the argument Name results in cross site scripting.
This vulnerability was named CVE-2025-56154. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
