CVE-2020-21345

Cross Site Scripting XSS vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code...

CVE-2020-21345

Halo 1.1.3 contains a Cross Site Scripting (XSS) vulnerability in the post publish components of the manage panel, allowing a remote attacker to execute arbitrary code. The available documents confirm the affected product/version and the XSS impact but do not provide detailed root-cause analysis,...