Security Advisory

CVE-2024-56156

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-25 15:08:00

Last updated 2026-02-03 18:07:18

Assigner GitHub_M

State PUBLISHED

Description

Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks and potential remote code execution under certain circumstances. This issue has been patched in version 2.20.13.

← Browse all CVEs View on cve.org ↗