Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function.

Published Apr 5, 2022 · Updated Aug 3, 2024 · Assigned by mitre