Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 09:42:46 +0000 CVE-2024-56156 — Halo Vulnerable to Stored XSS and RCE via File Upload Bypass https://cve.radiocsirt.org/vuln/cve-2024-56156 <p><strong>Affected:</strong> halo-dev halo</p> <p>Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks and potential remote code execution under certain circumstances. This issue has been patched in version 2.20.13.</p> <p><strong>Affected:</strong> halo-dev halo</p> <p>Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks and potential remote code execution under certain circumstances. This issue has been patched in version 2.20.13.</p> https://cve.radiocsirt.org/vuln/cve-2024-56156