CVE-2024-23725
Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
ghost
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.76.0"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web github.com