CVE-2021-43659

In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS…

published March 24, 2022

CVSS
—
EPSS
1%
Percentile
45.3
In the wild
Unconfirmed
What it is

In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00551 · 45.3th percentile
Published
2022-03-24T13:09Z
EPSS history
Timeline
  • 24 MAR 13:09Z
    In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS…
    cvelistv5