CVE-2025-44595 - Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}

MEDIUM

Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}

Published Sep 9, 2025

6.1

MEDIUM

CVSS 3.1

EPSS 0.24%

Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://meadow-horn-b94.notion.site/halo-xss-11842bd5b118808ba6f2c199a65bb42d		Broken Link

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 9, 2025

Updated Sep 10, 2025

Reserved Apr 22, 2025

Updated Sep 10, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a