Vulnerabilidades en TryGhost
88 resultadosCVE-2026-105682LOWGhost: Server-Side Request Forgery in Webhook TriggerEPSS 0.2%CVE-2026-103269MEDIUMGhost 5.3.0 before 6.62.0 Missing Authorization via Post ExcerptsEPSS 0.2%CVE-2026-105679HIGHGhost: Stored XSS via File Uploads on Local StorageEPSS 0.2%CVE-2026-105647MEDIUMGhost: Server-Side Request Forgery in Bookmark FetchingEPSS 0.2%CVE-2026-103292HIGHGhost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_headEPSS 0.2%CVE-2026-103289HIGHGhost 5.9.0 before 6.44.1 Authorization Bypass via CommentsEPSS 0.2%CVE-2026-53948MEDIUMGhost: File Upload Content-Type SpoofingEPSS 0.2%CVE-2026-103276MEDIUMGhost before 6.20.0 File Read via URL Encoding BypassEPSS 0.2%CVE-2026-25552MEDIUMGhost CLI < 1.30.1 IP Spoofing via X-Forwarded-For HeaderEPSS 0.2%CVE-2026-53945MEDIUMGhost: Server-side request forgery via DNS rebinding in external request handlingEPSS 0.2%CVE-2026-103274MEDIUMGhost 5.3.0 before 6.58.0 Unauthenticated Comment ReadEPSS 0.2%CVE-2026-103275MEDIUMGhost 5.42.2 before 6.58.0 Password Hash DisclosureEPSS 0.2%CVE-2026-53946MEDIUMGhost: Mobiledoc image-size fetch SSRFEPSS 0.2%CVE-2026-103280MEDIUMGhost 0.8.0 before 6.23.0 Information Disclosure via Setup EndpointEPSS 0.2%CVE-2026-104415LOWGhost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin APIEPSS 0.2%CVE-2026-103288HIGHGhost 5.9.0 before 6.44.1 Authorization Bypass via Comment LikeEPSS 0.2%CVE-2026-103287MEDIUMGhost 1.18.0 before 6.27.0 Server-Side Request Forgery via WebhookEPSS 0.2%CVE-2026-105678MEDIUMGhost: Editors Could Promote Staff Users to Their Own RoleEPSS 0.2%CVE-2026-104412MEDIUMGhost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role AssignmentEPSS 0.2%CVE-2026-29784HIGHGhost: Incomplete CSRF protections around OTC useEPSS 0.2%