htmly version 2.9.9 suffers from multiple persistent cross site scripting vulnerabilities.