3 matches found
CVE-2022-26619
Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function...
7.5CVSS7.4AI score0.00867EPSS
SaveExploits1References1
CVE-2022-26619
Halo Blog CMS v1.4.17 contains an authentication-free flaw in the Attachment Upload function that enables uploading arbitrary files. This is the concrete detail reported across multiple sources (CVE-2022-26619). The impact stated in the CVE record indicates partial integrity impact with the abili...
7.5CVSS7.6AI score0.00867EPSS
SaveExploits1References1Affected Software1
20