Exposure of Ghost

Blogs, CMS
149
exposure score
2,997
sites use
0
exploited
7
critical

CVEs

96 results
CVE-2026-103283HIGHGhost 6.20.0 before 6.57.1 Authentication Bypass via Session HandlingEPSS 0.3%CVE-2026-105642HIGHGhost: Remote Code Execution via Bookmark Card ImagesEPSS 0.3%CVE-2026-103267MEDIUMGhost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff InviteEPSS 0.3%CVE-2026-105681MEDIUMGhost: Authorization Bypass in Comments FeatureEPSS 0.3%CVE-2026-105652LOWGhost: Password Hash Ordering Disclosure in Ghost Admin APIEPSS 0.3%CVE-2026-103273MEDIUMGhost 4.3.0 before 6.58.0 Incorrect Authorization via Staff TokenEPSS 0.3%CVE-2026-104411HIGHGhost 6.22.1 before 6.64.0 Stored XSS via Local Storage File UploadsEPSS 0.3%CVE-2026-104413HIGHGhost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card ImagesEPSS 0.3%CVE-2026-70594MEDIUMGhost: Session Fixation in Ghost AdminEPSS 0.2%CVE-2026-105682LOWGhost: Server-Side Request Forgery in Webhook TriggerEPSS 0.2%CVE-2026-105679HIGHGhost: Stored XSS via File Uploads on Local StorageEPSS 0.2%CVE-2026-103269MEDIUMGhost 5.3.0 before 6.62.0 Missing Authorization via Post ExcerptsEPSS 0.2%CVE-2026-105647MEDIUMGhost: Server-Side Request Forgery in Bookmark FetchingEPSS 0.2%CVE-2026-103292HIGHGhost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_headEPSS 0.2%CVE-2026-103289HIGHGhost 5.9.0 before 6.44.1 Authorization Bypass via CommentsEPSS 0.2%CVE-2026-103276MEDIUMGhost before 6.20.0 File Read via URL Encoding BypassEPSS 0.2%CVE-2026-53948MEDIUMGhost: File Upload Content-Type SpoofingEPSS 0.2%CVE-2026-53945MEDIUMGhost: Server-side request forgery via DNS rebinding in external request handlingEPSS 0.2%CVE-2026-103274MEDIUMGhost 5.3.0 before 6.58.0 Unauthenticated Comment ReadEPSS 0.2%CVE-2026-103275MEDIUMGhost 5.42.2 before 6.58.0 Password Hash DisclosureEPSS 0.2%