Vulnerabilities

Filters

1 selected

110 records

Sort

Vendor: TryGhost Clear all filters

TI-2026-83421 CVE-2026-63115

Undo handler in Ghost ActivityPub removes other accounts' follows

LOW 29

ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00143 Published 2026-10-30 Fixed in 1.2.6 CWE-290

TI-2026-68328 CVE-2026-105683 · GHSA-83rp-q473-j88c

Path traversal in Ghost ImageSize service exposes local files

LOW 18

Ghost is a Node.js content management system.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00314 Published 2026-10-05 Fixed in 6.27.0 CWE-35

TI-2026-67900 CVE-2026-105682 · GHSA-354h-gmhv-mr9c

Server-side request forgery in Ghost webhook trigger

LOW 13

Ghost is a Node.js content management system.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.0024 Published 2026-10-05 Fixed in 6.27.0 CWE-918

TI-2026-67899 CVE-2026-105681 · GHSA-6q6j-f24j-p477

Authorization bypass in Ghost comments feature

LOW 28

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0026 Published 2026-10-05 Fixed in 6.44.1 CWE-943

TI-2026-67898 CVE-2026-105680 · GHSA-x3mg-q38v-m562

Missing authorization in Ghost lets Author role delete any post

LOW 29

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00273 Published 2026-10-05 Fixed in 6.60.0 CWE-862

TI-2026-67897 CVE-2026-105679 · GHSA-gfjp-2p8f-94qv

Stored cross-site scripting in Ghost file uploads on local storage

LOW 34

Ghost is a Node.js content management system.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00237 Published 2026-10-05 Fixed in 6.64.0 CWE-434

TI-2026-67896 CVE-2026-105678 · GHSA-4pvx-fwjj-8gpc

Ghost editors can assign roles they lack permission to assign

LOW 19

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00196 Published 2026-10-05 Fixed in 6.64.0 CWE-269

TI-2026-67895 CVE-2026-105677 · GHSA-jj74-hc2q-xrvm

Code execution via theme translation files in Ghost CMS

LOW 34

Ghost is a Node.js content management system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00524 Published 2026-10-05 Fixed in 6.64.0 CWE-22

TI-2026-67893 CVE-2026-105676 · GHSA-m382-6jw4-fmp6

Path traversal in Ghost lets administrators read JSON files

LOW 23

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00403 Published 2026-10-05 Fixed in 6.64.0 CWE-22

TI-2026-67892 CVE-2026-105675 · GHSA-v6q3-xqxm-6f5v

Ghost leaks pending invite tokens, enabling privilege escalation

LOW 35

Ghost is a Node.js content management system.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00395 Published 2026-10-05 Fixed in 6.64.0 CWE-203

TI-2026-67891 CVE-2026-105652 · GHSA-53vv-xm9f-mm82

Ghost Admin API leaks ordering of staff password hashes

LOW 15

Ghost is a Node.js content management system.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00258 Published 2026-10-05 Fixed in 6.64.0 CWE-203

TI-2026-67890 CVE-2026-105651 · GHSA-347q-26qq-h2p6

Stored cross-site scripting in Ghost bookmark card images

LOW 34

Ghost is a Node.js content management system.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00302 Published 2026-10-05 Fixed in 6.64.0 CWE-434

TI-2026-67889 CVE-2026-105650 · GHSA-v3xr-g6p2-fvgv

Stored cross-site scripting in Ghost via oEmbed photo responses

LOW 37

Ghost is a Node.js content management system.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00328 Published 2026-10-05 Fixed in 6.64.0 CWE-184

TI-2026-67888 CVE-2026-105649 · GHSA-8575-cr6v-7jh4

Stored cross-site scripting in Ghost via unsanitized SVG uploads

LOW 34

Ghost is a Node.js content management system.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00302 Published 2026-10-05 Fixed in 6.65.0 CWE-434

TI-2026-67887 CVE-2026-105648 · GHSA-r7f2-6fj8-6fg2

Private IP filtering bypass in Ghost via IPv6 transition addresses

LOW 19

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 4.0 Network No auth No interaction EPSS 0.00298 Published 2026-10-05 Fixed in 6.65.0 CWE-184

TI-2026-67886 CVE-2026-105647 · GHSA-322m-ff4g-9vx9

Server-side request forgery in Ghost bookmark fetching

LOW 18

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 4.0 Network No auth No interaction EPSS 0.00235 Published 2026-10-05 Fixed in 6.65.0 CWE-367

TI-2026-67871 CVE-2026-105646 · GHSA-fwh9-qg68-vxp4

Regular expression denial of service in Ghost content import

LOW 22

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00346 Published 2026-10-05 Fixed in 6.67.0 CWE-1333

TI-2026-67870 CVE-2026-105645 · GHSA-9m4w-fmjw-fvjq

Regular expression denial of service in Ghost external media inliner

LOW 22

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00346 Published 2026-10-05 Fixed in 6.67.0 CWE-1333

TI-2026-67869 CVE-2026-105644 · GHSA-hqq2-xqr2-fmx2

Stored cross-site scripting in Ghost via SVG content imports

LOW 32

Ghost is a Node.js content management system.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00322 Published 2026-10-05 Fixed in 6.67.0 CWE-434

TI-2026-67868 CVE-2026-105643 · GHSA-69qc-f5m6-889c

Stored cross-site scripting in Ghost embed card previews

LOW 34

Ghost is a Node.js content management system.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00277 Published 2026-10-05 Fixed in 6.67.0 CWE-653

TI-2026-67867 CVE-2026-105642 · GHSA-788w-68h3-cvxp

Remote code execution in Ghost via bookmark card images

MEDIUM 40

Ghost is a Node.js content management system.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00266 Published 2026-10-05 Fixed in 6.67.0 CWE-1395

TI-2026-66061 CVE-2026-104418 · GHSA-5pc5-4pc7-5x44

Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

MEDIUM 40

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00654 Published 2026-10-02 Fixed in 6.64.0 CWE-22

TI-2026-66060 CVE-2026-104417 · GHSA-3h86-86h6-p5gj

Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting

LOW 31

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00366 Published 2026-10-02 Fixed in 6.64.0 CWE-22

TI-2026-66059 CVE-2026-104416 · GHSA-8gr3-r7fg-c83w

Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API

LOW 35

Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00308 Published 2026-10-02 Fixed in 6.64.0 CWE-203

TI-2026-66058 CVE-2026-104415 · GHSA-7qfr-6f3v-xhxf

Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API

LOW 11

Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00205 Published 2026-10-02 Fixed in 6.64.0 CWE-203