EUVD-2020-10893

Malware in sbrugna...

Halo cross-site scripting vulnerability (CNVD-2021-50933)

Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 suffers from a cross-site scripting vulnerability that can be exploited by attackers via CommentAuthorUrl...

CVE-2020-18982

Cross Sie Scripting XSS vulnerability in Halo 0.4.3 via CommentAuthorUrl...

CVE-2020-18982

Cross Sie Scripting XSS vulnerability in Halo 0.4.3 via CommentAuthorUrl...

Cross site scripting

Cross Sie Scripting XSS vulnerability in Halo 0.4.3 via CommentAuthorUrl...

CVE-2020-18982

CVE-2020-18982 is a Cross-Site Scripting (XSS) vulnerability affecting Halo version 0.4.3, exploitable via the CommentAuthorUrl parameter. The incident is documented across multiple feeds (NVD, Red Hat, CNVD, OSV, etc.) with consistent wording: Halo 0.4.3 is vulnerable to XSS through CommentAutho...

CVE-2020-18982

Cross Sie Scripting XSS vulnerability in Halo 0.4.3 via CommentAuthorUrl...

CVE-2020-18982: Improper Neutralization of Input During Web Page Generation

Cross Sie Scripting XSS vulnerability in Halo 0.4.3 via CommentAuthorUrl...