GHSA-62Q6-4HV4-VJRW Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header

Impact When Ghost is behind a shared caching layer that results in cached content being shared between different visitors e.g., Fastly, Cloudflare, nginx proxycache, and others, an unauthenticated user could send an x-ghost-preview header that altered the rendered frontend response. In affected...

OneThink Frontend Cache Mechanism Has Design Flaw Vulnerability

OneThink is an open source content management framework developed by ThinkPHP team based on ThinkPHP. OneThink front-end caching mechanism has a design flaw vulnerability. Since the program caches registered usernames to a cache file in the temp directory, and the cache file has executable...