Lucene search
+L

1 matches found

OSV
OSV
•added 2026/08/17 5:40 a.m.•13 views

BIT-GHOST-2026-70588 Ghost: Cross-Site Scripting in Universal Import

Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1...

5CVSS5.9AI score0.00427EPSS
SaveExploits0References5
Rows per page
Query Builder