BIT-ghost-2026-105649

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/ghost/BIT-ghost-2026-105649.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-ghost-2026-105649
Aliases
Published
2026-10-13T06:50:18Z
Modified
2026-10-13T08:25:41Z
Summary
Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
Details

Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. This issue is fixed in version 6.65.0.

Database specific 
{
    "cpes":  [
        "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*"
    ],
    "severity":  "High"
}
References

Affected packages

Bitnami / ghost

Package

Name
ghost
Purl
pkg:bitnami/ghost

Severity

  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
4.22.0
Fixed
6.65.0

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/ghost/BIT-ghost-2026-105649.json"