CVE-2026-105644

Published: Ott 05, 2026 Last Modified: Ott 05, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,8
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: none

Description

AI Translation Available

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff users' admin sessions. This issue is fixed in version 6.67.0.

79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Stable
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Confidentiality Integrity Availability
Potential Impacts:
Bypass Protection Mechanism Read Application Data Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies: AI/ML, Web Based, Web Server
Likelihood of Exploit: High
View CWE Details
434

Unrestricted Upload of File with Dangerous Type

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Confidentiality Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
Languages: ASP.NET, PHP, Not Language-Specific
Technologies: Web Server, AI/ML
Likelihood of Exploit: Medium
View CWE Details
https://github.com/TryGhost/Ghost/commit/1be06f4e95a5eb159d…
https://github.com/TryGhost/Ghost/commit/1be06f4e95a5eb159d14abda7660e689af13cf…
https://github.com/TryGhost/Ghost/pull/31060
https://github.com/TryGhost/Ghost/pull/31060
https://github.com/TryGhost/Ghost/releases/tag/v6.66.0
https://github.com/TryGhost/Ghost/releases/tag/v6.66.0
https://github.com/TryGhost/Ghost/security/advisories/GHSA-…
https://github.com/TryGhost/Ghost/security/advisories/GHSA-hqq2-xqr2-fmx2