Cross-site Scripting (XSS)

Ghost is vulnerable to cross-site scripting XSS attacks. These attacks are possible through the sameAs field having non-escaped strings...