CVE-2020-21345

Cross Site Scripting XSS vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code...

Cross site scripting

Cross Site Scripting XSS vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code...

PT-2021-10613

Name of the Vulnerable Software and Affected Versions: Halo version 1.1.3 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows a remote malicious user to execute arbitrary code via post publish components in the manage panel. Recommendations: For Halo versio...

CVE-2020-21345: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code...