PT-2026-111354

Published

2026-10-13

·

Updated

2026-10-13

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0.
Vendors
Affected products
Related identifiers
BIT-GHOST-2026-105677
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com