Skip to content
Threat Feed
Subscribe

Product

Ghost (5.8.0 - 6.33.9)

1 brief RSS
high threat

Unauthenticated Stripe Checkout Manipulation in Ghost

A vulnerability in Ghost versions 5.2.0 through 6.61.9 allows unauthenticated remote attackers to manipulate Stripe Checkout flows to modify member records and inject malicious content into newsletters.

exploited Ghost +7 web-vulnerability xss application-security enumeration api-security remote-code-execution vulnerability cms
9t 1c updated