Exposición de Ghost

Blogs, CMS
149
score de exposición
2997
sitios usan
0
en explotación
7
críticos

CVEs

96 resultados
CVE-2026-53943CRITICALGhost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview headerEPSS 0.4%CVE-2026-70592MEDIUMGhost: Database Backup Path TraversalEPSS 0.4%CVE-2026-70588MEDIUMGhost: Cross-Site Scripting in Universal ImportEPSS 0.4%CVE-2026-70593MEDIUMGhost: Theme Upload Path TraversalEPSS 0.4%CVE-2026-59817MEDIUMGhost: Paid gift memberships obtainable at minimal cost via the donations featureEPSS 0.4%CVE-2026-105676MEDIUMGhost: Path Traversal via Locale SettingEPSS 0.4%CVE-2026-105675HIGHGhost: Invite Token Disclosure in Ghost Admin APIEPSS 0.4%CVE-2026-103271HIGHGhost 4.0.0 before 6.63.0 Restricted Content BypassEPSS 0.4%CVE-2026-72596HIGHGhost Foundation Ghost - Broken Access ControlEPSS 0.4%CVE-2026-104417MEDIUMGhost 1.20.0 before 6.64.0 Path Traversal via Locale SettingEPSS 0.4%CVE-2026-70591MEDIUMGhost: Server-Side Request Forgery in Image FetchingEPSS 0.4%CVE-2026-103272HIGHGhost 2.10.0 before 6.63.0 Staff Enumeration via Content APIEPSS 0.4%CVE-2026-53949MEDIUMGhost Content API filter bypass reveals private fieldsEPSS 0.4%CVE-2026-53950HIGH@tryghost/activitypub: XSS in Ghost's ActivityPub clientEPSS 0.4%CVE-2026-105645MEDIUMGhost: Regular Expression Denial of Service in External Media InlinerEPSS 0.3%CVE-2026-105646MEDIUMGhost: Regular Expression Denial of Service in Content ImportEPSS 0.3%CVE-2026-53947MEDIUMGhost: Member existence leak via magic link sign-in responseEPSS 0.3%CVE-2026-53944MEDIUMGhost: Private IP filtering bypass to make server-side requests to internal servicesEPSS 0.3%CVE-2026-105650HIGHGhost: Stored XSS via oEmbed Photo ResponsesEPSS 0.3%CVE-2026-70590MEDIUMGhost: Blind Password Hash Disclosure in Ghost Admin APIEPSS 0.3%