medium6.1
CVE-2020-21345
Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary co…
Impact
Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Halo | Halo | Version 1.1.3 |