Halo 跨站脚本漏洞

Halo is a powerful and easy-to-use open source site builder from Halo Open Source. A security vulnerability exists in Halo versions prior to 2.20.13, which stems from a file type validation bypass that could lead to a stored cross-site scripting attack or remote code execution...