Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/17 5:40 a.m.6 views

BIT-GHOST-2026-70588 Ghost: Cross-Site Scripting in Universal Import

Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1...

5CVSS5.2AI score0.00258EPSS
SaveExploits0References5
Rows per page
Query Builder