10 matches found
GHSA-62Q6-4HV4-VJRW Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header
Impact When Ghost is behind a shared caching layer that results in cached content being shared between different visitors e.g., Fastly, Cloudflare, nginx proxycache, and others, an unauthenticated user could send an x-ghost-preview header that altered the rendered frontend response. In affected...
9.6CVSS5.8AI score0.00446EPSS
SaveExploits0References3
20