Exposición de Ghost

Blogs, CMS
149
score de exposición
2997
sitios usan
0
en explotación
7
críticos

CVEs

96 resultados
CVE-2026-105644MEDIUMGhost: Stored XSS via SVG Files in Content ImportsEPSS 0.3%CVE-2024-43409MEDIUMGhost's improper authentication allows access to member information and actionsEPSS 0.3%CVE-2026-70596MEDIUMGhost: Cross-Site Scripting in Feature Image CaptionsEPSS 0.3%CVE-2026-103268HIGHGhost 1.0.0 before 6.62.0 Suspension Bypass via Password ResetEPSS 0.3%CVE-2026-105683LOWGhost: Path Traversal Vulnerability in Ghost ImageSize ServiceEPSS 0.3%CVE-2026-104416HIGHGhost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin APIEPSS 0.3%CVE-2026-105649HIGHGhost: Stored XSS via SVG Uploads Bypassing SanitizationEPSS 0.3%CVE-2026-105651HIGHGhost: Stored XSS via Bookmark Card ImagesEPSS 0.3%CVE-2026-103266HIGHGhost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account ModificationEPSS 0.3%CVE-2026-105648MEDIUMGhost: Private IP Filtering Bypass via IPv6 Transition AddressesEPSS 0.3%CVE-2026-22597MEDIUMGhost has SSRF via External Media InlinerEPSS 0.3%CVE-2026-24778HIGHGhost vulnerable to XSS via malicious Portal preview linksEPSS 0.3%CVE-2026-104414HIGHGhost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo ResponsesEPSS 0.3%CVE-2026-105643HIGHGhost: Stored XSS via Embed Card PreviewsEPSS 0.3%CVE-2026-70595MEDIUMGhost: Server-Side Request Forgery Mitigation IssueEPSS 0.3%CVE-2026-103290MEDIUMGhost 6.14.0 before 6.27.0 Path Traversal via ImageSizeEPSS 0.3%CVE-2026-103277HIGHGhost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbedEPSS 0.3%CVE-2026-105680MEDIUMGhost: Authorization Issue Allowed Author Role to Delete any PostEPSS 0.3%CVE-2026-103278HIGHGhost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframeEPSS 0.3%CVE-2026-70589MEDIUMGhost: Archived Offers can be RedeemedEPSS 0.3%