CVE-2025-44595

Description

Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.

Affected Platforms

Weakness Type

CWE-79

References

• https://meadow-horn-b94.notion.site/halo-xss-11842bd5b118808ba6f2c199a65bb42d