CVE-2025-44595

Halo v2.20.17 and before is vulnerable to Cross Site Scripting XSS in /halohost/archives/name...

CVE-2025-44595

Halo v2.20.17 and earlier is vulnerable to Cross-Site Scripting (XSS) through the /halo_host/archives/{name} endpoint. The issue affects the handling of the name parameter and can allow script injection. Multiple sources confirm the affected versions are prior to v2.20.17, with a suggested remedi...

CVE-2025-44595

Halo v2.20.17 and before is vulnerable to Cross Site Scripting XSS in /halohost/archives/name...

CVE-2025-44595

Halo v2.20.17 and before is vulnerable to Cross Site Scripting XSS in /halohost/archives/name...

PT-2025-36959

Name of the Vulnerable Software and Affected Versions: Halo versions prior to v2.20.17 Description: Halo is susceptible to a Cross Site Scripting XSS issue in the /halo host/archives/name API endpoint. The vulnerability resides in the handling of the name parameter, allowing for potential script...