Privilege Escalation

ghost is vulnerable to Privilege Escalation. The vulnerability exists in member.js because improper validation of nested objects via the members api which allows members to make changes to newsletter settings...