The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks.

Published Aug 5, 2025 · Updated Jul 5, 2026 · Assigned by mitre