Vendor
high
advisory
Stored XSS in Ghost via File Uploads
2 TTPs 1 CVEGhost versions 6.22.1 through 6.64.0 are vulnerable to stored cross-site scripting due to improper Content-Type handling in the local storage adapter, allowing staff-level users to execute malicious scripts on the site domain.
Ghost
web-application
xss
cve-2026-105679
2t
1c
high
advisory
Remote Code Execution in Ghost CMS 6.19.0
1 TTPGhost CMS version 6.19.0 is susceptible to unauthenticated remote code execution via a publicly disclosed exploit.
Ghost
rce
webapps
ghost-cms
1t