Hardcoded credentials

2019-09-2521:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.

CPENameOperatorVersion
haloeq1.1.0

CPE	Name	Operator	Version
	halo	eq	1.1.0

References

github.com/halo-dev/halo/issues/311