CVEvulnerability

CVE-2026-105651

7.3 HIGH Published 2026-10-05 Modified 2026-10-07 Official page ↗

Status: Deferred
Published: 2026-10-05
Last modified: 2026-10-07
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Weaknesses: CWE-434, CWE-79

Description

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's domain, possibly resulting in compromise of other staff users' admin sessions. This issue is fixed in version 6.64.0.

Weakness · CWE (2)

CWE-434 Unrestricted Upload of File with Dangerous Type weakness
CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

https://github.com/TryGhost/Ghost/commit/b41fe3f2c399cef058e6b487782a0b2263e86c03 github.com
https://github.com/TryGhost/Ghost/issues/30761 github.com
https://github.com/TryGhost/Ghost/releases/tag/v6.64.0 github.com
https://github.com/TryGhost/Ghost/security/advisories/GHSA-347q-26qq-h2p6 github.com

CVE-2026-105651

Description

Related

Weakness · CWE (2)

References