Skip to content
OpenAdvisories

Vendor

HAL

1 known vulnerabilities.

Products

HAL 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2021-39345

    HAL <= 2.1.1 Authenticated Stored Cross-Site Scripting

    The HAL WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/wp-hal.php file which allowed attackers with administrative user access to inject arbitrary web s…

    HAL HAL Web / CMS