Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 67
Reset filtersXSS in Ghost's ActivityPub client
Ghost: Session Fixation in Ghost Admin
Ghost: Theme Upload Path Traversal
Ghost: Database Backup Path Traversal
Ghost: Server-Side Request Forgery in Image Fetching
Ghost: Blind Password Hash Disclosure in Ghost Admin API
Ghost: Mobiledoc image-size fetch SSRF
Ghost: Server-side request forgery via DNS rebinding in external request handling
Ghost: Private IP filtering bypass to make server-side requests to internal services
Ghost: Archived Offers can be Redeemed
Ghost: File Upload Content-Type Spoofing
Ghost: Cross-Site Scripting in Universal Import
Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header
Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution
Ghost has incomplete CSRF protections around OTC use
Ghost Vulnerable to Remote Code Execution via Malicious Themes
Ghost has a SQL injection in Content API
Ghost vulnerable to XSS via malicious Portal preview links
Ghost has SQL Injection in Members Activity Feed
Ghost has SSRF via External Media Inliner
Ghost has Staff Token permission bypass
Ghost has Staff 2FA bypass
Ghost vulnerable to Server Side Request Forgery (SSRF) via oEmbed Bookmark
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.