CVE-2025-60898 | Halo CMS 2.21 Endpoint server-side request forgery

October 29, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Halo CMS 2.21. This vulnerability affects unknown code of the component Endpoint. The manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2025-60898. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More