{"id":"CVE-2022-28074","details":"Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \\admin\\index.html#/system/tools.","modified":"2026-08-12T03:51:39.371550295Z","published":"2022-04-22T13:33:49Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28074.json","cna_assigner":"mitre"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28074.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28074"},{"type":"REPORT","url":"https://github.com/halo-dev/halo/issues/1769"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/halo-dev/halo","events":[{"introduced":"6533089555d7915b2af38802f9797cd68ece4586"},{"last_affected":"6533089555d7915b2af38802f9797cd68ece4586"}],"database_specific":{"cpe":"cpe:2.3:a:fit2cloud:halo:1.5.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.5.0"},{"last_affected":"1.5.0"}],"source":"CPE_STRING"}}],"versions":["1.5.0","v1.5.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-28074.json"}}],"schema_version":"1.9.0"}