Security Advisory

CVE-2022-22123

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-13 16:45:14

Last updated 2024-09-17 01:51:59

Assigner Mend

State PUBLISHED

Description

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server.

← Browse all CVEs View on cve.org ↗