CVE-2024-56156

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq76r3yt24 2025-04-25 19:11:04+00:00| seen| https://t.me/cvedetector/23761 2025-04-25 21:36:02+00:00| seen|...

CVE-2024-56156

Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks a...

CVE-2024-56156 Halo Vulnerable to Stored XSS and RCE via File Upload Bypass

Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks a...

CVE-2024-56156

CVE-2024-56156 affects Halo prior to 2.20.13. The vulnerability arises from a file type validation bypass in the upload mechanism, allowing malicious files (including executables and HTML) which can lead to stored XSS and, under certain circumstances, remote code execution. A fixed version, 2.20....

CVE-2024-56156 Halo Vulnerable to Stored XSS and RCE via File Upload Bypass

Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks a...