CVE-2022-28074: Improper Neutralization of Input During Web Page Generation

Halo-1.5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via \admin\index.html/system/tools...

PT-2022-18793

Name of the Vulnerable Software and Affected Versions Halo version 1.5.0 Description A stored cross-site scripting XSS issue was found in Halo. The issue is related to the "/admin/index.html/system/tools" API endpoint. This could potentially allow for malicious script execution. Recommendations F...