Vulnerability Details CVE-2020-21345
                Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.002
                        
                    
                    
                        
                            EPSS Ranking 45.1%
                        
                    
                 
                
                    CVSS Severity
                    
                        
                            CVSS v3 Score 6.1
                        
                    
                    
                        
                            CVSS v2 Score 4.3
                        
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2020-21345
                        
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:halo:halo:1.1.3