Lucene search
China National Vulnerability DatabaseCNVD-2022-08205HistoryJan 17, 2022 - 12:00 a.m.
Halo Cross-Site Scripting Vulnerability (CNVD-2022-08205)
2022-01-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.001 Low
EPSS
Percentile
26.4%
Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability that originates in Halo, versions v1.0.0 through v1.4.17 (latest) are vulnerable to cross-site scripting (XSS) stored in profile images, which can be exploited by an attacker to upload a crafted SVG file that will trigger arbitrary javascript to run on the victim’s browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Halo Halo >=1.0.0， | le | 1.4.17 |
Related
cvelist
cvelist
CVE-2022-22124 Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image
2022-01-11 00:00:00
nvd
nvd
CVE-2022-22124
2022-01-13 17:15:07
osv
osv
CVE-2022-22124
2022-01-13 17:15:07
cve
cve
CVE-2022-22124
2022-01-13 17:15:07
prion
prion
Cross site scripting
2022-01-13 17:15:00