Product by Halo-dev

    Halo

    12 known vulnerabilities in Halo (Halo-dev), 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Halo (Halo-dev)
    HighCVE-2026-116117

    halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal

    		7.3
    CriticalCVE-2024-56156

    Halo Vulnerable to Stored XSS and RCE via File Upload Bypass

    also in 1 other product

    		9.0
    HighCVE-2026-97182

    halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization

    		7.3
    MediumCVE-2026-91772

    Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter

    		6.1
    MediumCVE-2026-16088

    halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal

    		4.7
    MediumCVE-2026-55439

    Halo: Path Traversal in Backup Download Leads to Arbitrary File Read

    		5.5
    MediumCVE-2026-15326

    halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal

    		3.8
    MediumCVE-2022-22125

    Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag

    also in 1 other product

    		4.8
    MediumCVE-2022-22124

    Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image

    also in 1 other product

    		5.4
    MediumCVE-2022-22123

    Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Title

    also in 1 other product

    		5.4
    MediumCVE-2024-43792

    Halo's editor has a stored Cross-Site Scripting vulnerability

    also in 1 other product

    		6.3
    MediumCVE-2024-43793

    Halo's editor has a stored XSS vulnerability

    also in 1 other product

    		6.3

    All products by Halo-dev