CVE-2025-44593

The open-source website builder Halo is vulnerable in versions prior to 2.20.13 due to a flaw that allows for bypassing file type detection . An attacker can leverage this to upload malicious files, such as .exe and .html files. Specifically, the upload of .html files can trigger stored cross-sit...