Jhhuao

**Name of the Vulnerable Software and Affected Versions** Halo version 1.5.0 **Description** A stored cross-site scripting (XSS) issue was found in Halo. The issue is related to the "/admin/index.html#/system/tools" API endpoint. This could potentially allow for malicious script execution. **Recommendations** For version 1.5.0, as a temporary workaround, consider restricting access to the "/admin/index.html#/system/tools" endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.