CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

RedhatCVE•added 2026/01/07 9:29 a.m.•18 views

CVE-2019-16890

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...

5.4CVSS5.7AI score0.00661EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2020/08/26 12:00 a.m.•0 views

CVE-2020-19007: Improper Neutralization of Input During Web Page Generation

Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code supplied by the attacker will then execute in the victim user's browser...

5.4CVSS6AI score0.00499EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2019/09/25 12:00 a.m.•3 views

CVE-2019-16890: Improper Neutralization of Input During Web Page Generation

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...

5.4CVSS5.9AI score0.00661EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by