Description halo v1.6.0 is vulnerable to Cross Site Scripting (XSS). References https://github.com/halo-dev/halo/releases/tag/v1.6.0 https://gist.github.com/alert-moyan/be0bd087d85c1416829b8e9659e8b66c