agentprime: ghost

agentprime: ghostEvery new CVE for ghost.https://agentprime.io/CVE-2026-103292: Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_headhttps://agentprime.io/advisories/CVE-2026-103292/https://agentprime.io/advisories/CVE-2026-103292/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:25 GMTCVECVE-2026-103291: Ghost 3.20.2 before 6.51.0 SSRF via image-size fetchhttps://agentprime.io/advisories/CVE-2026-103291/https://agentprime.io/advisories/CVE-2026-103291/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:24 GMTCVECVE-2026-103286: Ghost 2.21.0 before 6.56.0 Privilege Escalation via Notificationshttps://agentprime.io/advisories/CVE-2026-103286/https://agentprime.io/advisories/CVE-2026-103286/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:21 GMTCVECVE-2026-103285: Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgeryhttps://agentprime.io/advisories/CVE-2026-103285/https://agentprime.io/advisories/CVE-2026-103285/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:20 GMTCVECVE-2026-103284: Ghost 5.125.1 before 6.57.1 Information Disclosure via Feedbackhttps://agentprime.io/advisories/CVE-2026-103284/https://agentprime.io/advisories/CVE-2026-103284/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:19 GMTCVECVE-2026-103283: Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handlinghttps://agentprime.io/advisories/CVE-2026-103283/https://agentprime.io/advisories/CVE-2026-103283/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:18 GMTCVECVE-2026-103282: Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Tokenhttps://agentprime.io/advisories/CVE-2026-103282/https://agentprime.io/advisories/CVE-2026-103282/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:18 GMTCVECVE-2026-103281: Ghost 3.23.0 before 6.23.0 API Key Exposure via Admin APIhttps://agentprime.io/advisories/CVE-2026-103281/https://agentprime.io/advisories/CVE-2026-103281/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:17 GMTCVECVE-2026-103280: Ghost 0.8.0 before 6.23.0 Information Disclosure via Setup Endpointhttps://agentprime.io/advisories/CVE-2026-103280/https://agentprime.io/advisories/CVE-2026-103280/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:16 GMTCVECVE-2026-103279: Ghost 3.10.0 before 6.34.0 Session Invalidation Bypasshttps://agentprime.io/advisories/CVE-2026-103279/https://agentprime.io/advisories/CVE-2026-103279/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:16 GMTCVECVE-2026-103278: Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframehttps://agentprime.io/advisories/CVE-2026-103278/https://agentprime.io/advisories/CVE-2026-103278/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:15 GMTCVECVE-2026-103277: Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbedhttps://agentprime.io/advisories/CVE-2026-103277/https://agentprime.io/advisories/CVE-2026-103277/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:14 GMTCVECVE-2026-103276: Ghost before 6.20.0 File Read via URL Encoding Bypasshttps://agentprime.io/advisories/CVE-2026-103276/https://agentprime.io/advisories/CVE-2026-103276/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:13 GMTCVECVE-2026-103275: Ghost 5.42.2 before 6.58.0 Password Hash Disclosurehttps://agentprime.io/advisories/CVE-2026-103275/https://agentprime.io/advisories/CVE-2026-103275/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:13 GMTCVECVE-2026-103274: Ghost 5.3.0 before 6.58.0 Unauthenticated Comment Readhttps://agentprime.io/advisories/CVE-2026-103274/https://agentprime.io/advisories/CVE-2026-103274/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:12 GMTCVECVE-2026-103273: Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Tokenhttps://agentprime.io/advisories/CVE-2026-103273/https://agentprime.io/advisories/CVE-2026-103273/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:11 GMTCVECVE-2026-103272: Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content APIhttps://agentprime.io/advisories/CVE-2026-103272/https://agentprime.io/advisories/CVE-2026-103272/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:11 GMTCVECVE-2026-103271: Ghost 4.0.0 before 6.63.0 Restricted Content Bypasshttps://agentprime.io/advisories/CVE-2026-103271/https://agentprime.io/advisories/CVE-2026-103271/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:10 GMTCVECVE-2026-103269: Ghost 5.3.0 before 6.62.0 Missing Authorization via Post Excerptshttps://agentprime.io/advisories/CVE-2026-103269/https://agentprime.io/advisories/CVE-2026-103269/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:09 GMTCVECVE-2026-103268: Ghost 1.0.0 before 6.62.0 Suspension Bypass via Password Resethttps://agentprime.io/advisories/CVE-2026-103268/https://agentprime.io/advisories/CVE-2026-103268/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:09 GMTCVECVE-2026-103267: Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invitehttps://agentprime.io/advisories/CVE-2026-103267/https://agentprime.io/advisories/CVE-2026-103267/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:08 GMTCVECVE-2026-103266: Ghost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account Modificationhttps://agentprime.io/advisories/CVE-2026-103266/https://agentprime.io/advisories/CVE-2026-103266/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:07 GMTCVECVE-2026-72596: Ghost Foundation Ghost - Broken Access Controlhttps://agentprime.io/advisories/CVE-2026-72596/https://agentprime.io/advisories/CVE-2026-72596/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:13:39 GMTCVECVE-2024-34559: WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerabilityhttps://agentprime.io/advisories/CVE-2024-34559/https://agentprime.io/advisories/CVE-2024-34559/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 May 2024 12:03:01 GMTCVECVE-2022-47197: Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…https://agentprime.io/advisories/CVE-2022-47197/https://agentprime.io/advisories/CVE-2022-47197/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jan 2023 17:02:15 GMTCVEcriticalCVE-2022-47196: Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…https://agentprime.io/advisories/CVE-2022-47196/https://agentprime.io/advisories/CVE-2022-47196/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jan 2023 17:02:15 GMTCVEcriticalCVE-2022-47195: Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…https://agentprime.io/advisories/CVE-2022-47195/https://agentprime.io/advisories/CVE-2022-47195/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jan 2023 17:02:15 GMTCVEcriticalCVE-2022-47194: Ghost: An insecure default vulnerability exists in the Post Creation functionality of Ghost…https://agentprime.io/advisories/CVE-2022-47194/https://agentprime.io/advisories/CVE-2022-47194/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jan 2023 17:02:10 GMTCVEcriticalCVE-2022-41697: A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4.https://agentprime.io/advisories/CVE-2022-41697/https://agentprime.io/advisories/CVE-2022-41697/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Dec 2022 23:03:51 GMTCVE