Submit #697391: fit2cloud Halo 2.21.10 Cross-Site Request Forgery

The Halo blog framework interface has a CSRF vulnerability.
For details, please refer to the link. https://blksword.flowus.cn/

• Source: ⚠️ https://blksword.flowus.cn/ or https://github.com/BlkSword/POC
• User: XiaoHei (UID 92738)
• Submission: 11/18/2025 14:53 (8 months ago)
• Moderation: 12/05/2025 16:26 (17 days later)
• Status: Accepted
• VulDB entry: 334494 [fit2cloud Halo 2.21.10 cross-site request forgery]
• Points: 15