Skip to content
Threat Feed
Subscribe

Product

Ghost (4.39.0 <= Version < 6.64.0)

1 brief RSS
high threat

Unauthenticated Stripe Checkout Manipulation in Ghost

A vulnerability in Ghost versions 5.2.0 through 6.61.9 allows unauthenticated remote attackers to manipulate Stripe Checkout flows to modify member records and inject malicious content into newsletters.

exploited Ghost +7 web-vulnerability xss application-security enumeration api-security remote-code-execution vulnerability cms
9t 1c updated