CVE-2020-21345: Halo

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code.

Affected products

• Halo Halo: version 1.1.3 only

Published 2021-05-20. Last modified 2026-06-17.