CVE-2024-23725

Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries...

CVE-2024-23725

CVE-2024-23725 affects Ghost prior to 5.76.0. The vulnerability is an XSS in post excerpts processed by excerpt.js, allowing an attacker to craft payloads rendered in post summaries. Public references in connected sources corroborate the XSS in Ghost and point to the fixed version 5.76.0 (release...