EUVD-2025-23648

Malicious code in bioql PyPI...

CVE-2025-51857

The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks...

CVE-2025-51857

The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks...

CVE-2025-51857

The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks...

CVE-2025-51857

The Halo website builder (versions v.2.20.18LTS and before ) is vulnerable to Cross-Site Scripting (XSS) attacks. The flaw exists within the reconcile method of the AttachmentReconciler class, where the application fails to properly neutralize input during web page generation. To remediate this v...

CVE-2025-51857

The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks...

CVE-2025-51857

The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks...

Halo 跨站脚本漏洞

Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability via the X-forwarded-for Header parameter in Halo 0.4.3. An attacker could exploit the vulnerability to execute client-side...