5255Fgh

**Name of the Vulnerable Software and Affected Versions** Ghost versions 4.22.0 through 6.64.0 **Description** SVG media thumbnails and SVG images uploaded with a non-SVG file extension are stored without sanitization. This allows staff users, including those with Contributor roles, to host malicious scripts on the site domain, which could lead to the compromise of administrative sessions of other staff users. **Recommendations** Update to version 6.65.0.

**Name of the Vulnerable Software and Affected Versions** Ghost versions 5.94.0 through 6.63.0 **Description** Ghost, a Node.js content management system, allows staff users, including those with Contributor roles, to host arbitrary HTML on the site domain. This occurs when creating a bookmark card, as the system may store non-image files fetched from external websites as bookmark icons or thumbnails. This behavior could lead to the compromise of administrative sessions of other staff users. **Recommendations** Update Ghost to version 6.64.0.

**Name of the Vulnerable Software and Affected Versions** Ghost versions 6.22.1 through 6.63.0 **Description** Ghost is a Node.js content management system. When using the default local storage adapter, the system fails to restrict the content type of uploaded files. This allows files uploaded by staff users to be served with a content type based on their file extension, which can be exploited to host scripts on the site domain and potentially compromise the admin sessions of other staff users. **Recommendations** Update to version 6.64.0.

**Name of the Vulnerable Software and Affected Versions** Ghost versions 6.22.1 through 6.63.x **Description** A stored cross-site scripting issue exists where staff users can host malicious scripts by uploading files that are served with extension-derived content types using the default local storage adapter. This allows an attacker to upload script-bearing files to the site domain to compromise the admin sessions of other staff users. **Recommendations** Update Ghost to version 6.64.0 or later.

**Name of the Vulnerable Software and Affected Versions** Ghost versions 5.94.0 through 6.63.0 **Description** A stored cross-site scripting issue exists that allows staff users, such as Contributors, to host arbitrary HTML. This is achieved by abusing the bookmark card image fetching mechanism, where attackers can create bookmark cards that store non-image files from external websites as icons or thumbnails to compromise the admin sessions of other staff users. **Recommendations** Update Ghost to version 6.64.0 or later.