Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 67
Reset filtersGhost allows CSV Injection during member CSV export
Ghost has possible Cross-site Scripting issue
Cross-site Scripting in Ghost
Ghost vulnerable to arbitrary file read via symlinks in content import
Path Traversal in Ghost
Ghost vulnerable to information disclosure of private API fields
sqlite vulnerable to code execution due to Object coercion
a12nserver vulnerable to potential SQL Injections via Knex dependency
ghost vulnerable to unauthorized newsletter modification via improper access controls
Ghost vulnerable to remote code execution in locale setting change
Arbitrary file upload in Ghost
Arbitrary file upload in Ghost
Potential exposure of tokens to an Unauthorized Actor
Member account takeover
Remote command injection when using sendmail email transport
Privilege escalation: all users can access Admin-level API keys
Server-side request forgery in Ghost CMS
DOM XSS in Theme Preview
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.