ghost vulnerabilities (npm)
73 vulnerabilities.
ghostnpmGhost Vulnerable to Remote Code Execution via Malicious Themes7.7 HighghostnpmGhost has a SQL Injection in its Content API9.4 CriticalghostnpmGhost vulnerable to XSS via malicious Portal preview links8.8 HighghostnpmGhost has SQL Injection in Members Activity Feed6.7 MediumghostnpmGhost has SSRF via External Media Inliner5.1 MediumghostnpmGhost has Staff Token permission bypass8.1 HighghostnpmGhost has Staff 2FA bypass8.1 HighghostnpmGhost 6.0.6 - SSRF via oEmbed Bookmark6.1 MediumghostnpmGhost's improper authentication allows access to member information and actions6.5 MediumghostnpmGhost has possible Cross-site Scripting issue9.0 CriticalghostnpmCross-site Scripting in Ghost6.1 MediumghostnpmArbitrary file read via symlinks in Ghost4.9 MediumghostnpmPath Traversal in Ghost7.5 HighghostnpmGhost vulnerable to disclosure of private API fields7.5 Highghostnpmghost vulnerable to unauthorized newsletter modification via improper access controls9.6 CriticalghostnpmGhost vulnerable to remote code execution in locale setting change6.6 MediumghostnpmArbitrary file upload in Ghost9.8 CriticalghostnpmArbitrary file upload in Ghost9.8 CriticalghostnpmMember account takeover6.5 MediumghostnpmRemote command injection when using sendmail email transport5.8 MediumghostnpmPrivilege escalation: all users can access Admin-level API keys6.5 MediumghostnpmDOM XSS in Theme Preview6.8 MediumghostnpmServer-side request forgery in Ghost CMS8.1 High