CVE-2022-28074

2022-04-2214:15:09

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/tools.

CPENameOperatorVersion
haloeq1.4.0-beta.1
haloeq1.0.2-beta.1
haloeq0.1
haloeq1.1.3-beta.1
haloeq1.4.3-beta.3
haloeq1.0.0-beta.8
haloeq0.4.1
haloeq1.4.0
haloeq1.4.1
haloeq0.0.8

Name	Operator	Version
halo	eq	1.4.0-beta.1
halo	eq	1.0.2-beta.1
halo	eq	0.1
halo	eq	1.1.3-beta.1
halo	eq	1.4.3-beta.3
halo	eq	1.0.0-beta.8
halo	eq	0.4.1
halo	eq	1.4.0
halo	eq	1.4.1
halo	eq	0.0.8

Rows per page:

1-10 of 771

References

github.com/halo-dev/halo/issues/1769