CVE-2025-44593

Vulnerability Description

Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html files can trigger stored XSS vulnerabilities. This vulnerability is fixed in 2.20.13

Vulnerability Details

Published Date

September 09, 2025

Last Modified

September 18, 2025

Source

NVD

CVE-2025-44593

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment