GHSA-99vc-xw8j-phjmMediumCVSS 6.5

Ghost has possible Cross-site Scripting issue

Published
February 11, 2024
Last Modified
September 5, 2024

🔗 CVE IDs covered (1)

CVE-2024-23724 →

📋 Description

Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view this as a valid vector."

🎯 Affected products1

  • npm/ghost:<= 5.76.0

🔗 References (5)