← All advisories

Unrated severityNVD Advisory· Published Sep 25, 2019· Updated Aug 5, 2024

CVE-2019-16890

CVE-2019-16890

Description

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Halo/Halodescription
Halo Dev/Halollm-fuzzy
Range: <=1.1.0

Patches

Vulnerability mechanics

References

1

github.com/halo-dev/halo/issues/311mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.