Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.
CVSS Score
5.4
EPSS Score
0.002
Published
2019-09-25
ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-05-12
ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-05-12
Page 4