CVE-2022-47195

creationtimestamp| type| source ---|---|--- 2023-01-19 20:22:07+00:00| seen| https://t.me/cibsecurity/56719...

CVE-2022-47195

CVE-2022-47195 affects Ghost Foundation Ghost 5.9.4. The issue is an insecure default in Post Creation that allows non-administrator users to inject arbitrary JavaScript into posts, enabling privilege escalation to administrator via XSS. A stored XSS vulnerability is also described in the user’s ...

CVE-2022-47195

An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this...

Ghost Foundation Ghost Post Creation insecure default installation vulnerability

Talos Vulnerability Report TALOS-2022-1686 Ghost Foundation Ghost Post Creation insecure default installation vulnerability January 19, 2023 CVE Number CVE-2022-47197,CVE-2022-47195,CVE-2022-47194,CVE-2022-47196 SUMMARY An insecure default vulnerability exists in the Post Creation functionality o...