CVE-2026-70588 in Ghost

요약

\~에 의해 MITRE • 2026. 08. 05.

Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 책임이 있는: GitHub M
• 예약하다: 2026. 08. 04.
• 공개: 2026. 08. 05.
• 모더레이션: 수락
• 항목: VDB-385974
• CPE: 준비됨
• CWE: CWE-79 (확인됨)
• CVSS: 2.4 (VulDB)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-70588
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-70588
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-70588/