CNNVD-202509-1158 Information
Sep 09, 2025
cve
CNNVD ID
CNNVD-202509-1158
Related CVE
- CNNVD Published: 2025-09-09
Description (Chinese)
Halo是Halo开源的一个强大易用的开源建站工具。 Halo v2.20.17及之前版本存在安全漏洞，该漏洞源于跨站脚本，可能导致执行恶意脚本。
Description (English)
Halo is a powerful and easy-to-use open-source construction tool for Halo. Haro v2.20.17 and earlier versions contained a security loophole that originated in a cross-site script and could lead to the implementation of malicious scripts.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Hamilton-medical
Published
2025-09-09
Last Modified
2026-02-24
References
https://meadow-horn-b94.notion.site/halo-xss-11842bd5b118808ba6f2c199a65bb42d https://access.redhat.com/security/cve/cve-2025-44595