Security Advisory

CVE-2024-43792

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-02 16:15:40

Last updated 2024-09-03 14:20:31

Assigner GitHub_M

State PUBLISHED

Description

Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.17.0 of the Halo project. This vulnerability allows an attacker to execute malicious scripts in the users browser through specific HTML and JavaScript code, potentially leading to a Cross-Site Scripting (XSS) attack. Users are advised to upgrade to version 2.17.0+. There are no known workarounds for this vulnerability.

← Browse all CVEs View on cve.org ↗