CRITICAL🇵🇱 Wersja polska

CVE-2024-23724

CVSS 9.0v3.1pub. 2024-02-11upd. 2024-11-21

Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view this as a valid vector."

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

  • Ghost

    APP
    Ghost
    ≤ 5.76.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSSLPE
CWE
References

Related vulnerabilities

CVE-2026-26980CRITICAL9.4PL ✓ten sam produkt

Ghost CMS: nieuwierzytelniony odczyt bazy danych przez SQL injection

CVE-2024-34451CRITICAL9.1PL ✓ten sam produkt

Ghost CMS – obejście limitu prób uwierzytelnienia przez nagłówki X-Forwarded-For

CVE-2022-28397CRITICAL9.8ten sam produkt

An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to exec...

CVE-2022-27139CRITICAL9.8ten sam produkt

An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute ...

CVE-2026-29784HIGH7.5ten sam produkt

Ghost is a Node.js content management system. From version 5.101.6 to 6.19.2, incomplete CSRF protections arou...