Vulnerabilities in halo-dev

9 results

Vexday analysis

Halo-dev apresenta um perfil de risco moderado com 9 vulnerabilidades registradas, nenhuma atualmente sob exploração ativa. A fraqueza dominante é CWE-79 (Cross-site Scripting), com 3 novas divulgações nos últimos 90 dias, indicando atividade recente de descoberta. Embora nenhuma vulnerabilidade crítica tenha sido documentada, o padrão de publicações recentes recomenda monitoramento contínuo.

CVE-2022-22125MEDIUMHalo CMS - Stored Cross-Site Scripting (XSS) in Article's TagEPSS 0.8%CVE-2024-56156MEDIUMHalo Vulnerable to Stored XSS and RCE via File Upload BypassEPSS 0.7%CVE-2022-22123MEDIUMHalo CMS - Stored Cross-Site Scripting (XSS) in Article's TitleEPSS 0.7%CVE-2022-22124MEDIUMHalo CMS - Stored Cross-Site Scripting (XSS) in Profile ImageEPSS 0.7%CVE-2026-15326MEDIUMhalo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversalEPSS 0.4%CVE-2024-43792MEDIUMHalo's editor has a stored Cross-Site Scripting vulnerabilityEPSS 0.4%CVE-2026-55439MEDIUMHalo: Path Traversal in Backup Download Leads to Arbitrary File ReadEPSS 0.3%CVE-2026-16088MEDIUMhalo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversalEPSS 0.3%CVE-2024-43793MEDIUMHalo's editor has a stored XSS vulnerabilityEPSS 0.3%