Login Request a demo
HA
Product
Halo
by fit2cloud · last CVE Dec 6, 2025
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities4Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Halo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-14117
6.5
0%
Dec 6
fit2cloud Halo cross-site request forgery
Affected: 2.21.10
CVE-2022-22124
5.4
1%
Jan 13
In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image
Affected: 1.0.0 through 1.4.17
CVE-2022-22123
5.4
1%
Jan 13
In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title
Affected: 1.0.0 through 1.4.17
CVE-2022-28074
4.8
0%
Apr 22
Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/tools
Affected: 1.5.0
Showing 4