{"id":"EUVD-2026-53391","enisaUuid":"ab1613cd-5986-30f8-86f8-6f4b2513965e","description":"Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in feature_image_caption that could be used to hijack another staff user\u0027s Ghost Admin session, resulting in privilege escalation. This issue is fixed in 6.54.1.","datePublished":"Aug 5, 2026, 2:40:12 PM","dateUpdated":"Aug 5, 2026, 5:32:38 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-pr22-p9rp-2cqv\nhttps://github.com/TryGhost/Ghost/pull/29635\nhttps://github.com/TryGhost/Ghost/commit/a8bea3a4ceec4c852b880f4885119453c3d8588e\nhttps://github.com/TryGhost/Ghost/releases/tag/v6.54.1\n","aliases":"CVE-2026-70596\nGHSA-pr22-p9rp-2cqv\n","assigner":"GitHub_M","epss":0.32,"enisaIdProduct":[{"id":"09fd4ebd-39c7-3120-85cf-107e9abd8663","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"4.9.0, \u003c 6.54.1"}],"enisaIdVendor":[{"id":"91420c58-cca6-3f6b-925f-3f7036fa4560","vendor":{"name":"TryGhost"}}],"enisaIdVulnerability":[{"id":"2632d958-7070-38c0-9ad1-89f7ddc3ebfd","vulnerability":{"id":"GHSA-pr22-p9rp-2cqv","description":"Ghost: Cross-Site Scripting in Feature Image Captions","datePublished":"Aug 5, 2026, 2:40:15 PM","dateUpdated":"Aug 5, 2026, 2:40:57 PM","baseScore":0.0,"references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-pr22-p9rp-2cqv\nhttps://github.com/TryGhost/Ghost/pull/29635\nhttps://github.com/TryGhost/Ghost/commit/a8bea3a4ceec4c852b880f4885119453c3d8588e\nhttps://github.com/TryGhost/Ghost\nhttps://github.com/TryGhost/Ghost/releases/tag/v6.54.1\n","enisa_id":"EUVD-2026-53391\n","aliases":"GHSA-pr22-p9rp-2cqv\nCVE-2026-70596\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:49 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c925b438-711a-3793-89ef-4bd938576f14","vulnerability":{"id":"CVE-2026-70596","description":"Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in feature_image_caption that could be used to hijack another staff user\u0027s Ghost Admin session, resulting in privilege escalation. This issue is fixed in 6.54.1.","datePublished":"Aug 5, 2026, 2:40:12 PM","dateUpdated":"Aug 5, 2026, 5:32:38 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-pr22-p9rp-2cqv\nhttps://github.com/TryGhost/Ghost/pull/29635\nhttps://github.com/TryGhost/Ghost/commit/a8bea3a4ceec4c852b880f4885119453c3d8588e\nhttps://github.com/TryGhost/Ghost/releases/tag/v6.54.1\n","enisa_id":"EUVD-2026-53391\n","assigner":"GitHub_M","epss":0.32,"dataProcessed":"Nov 1, 2026, 7:13:53 AM","vulnerabilityProduct":[{"id":"60ac25c0-84ea-3aa3-809c-80925345e3a7","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"4.9.0, \u003c 6.54.1"}],"vulnerabilityVendor":[{"id":"99dbbc41-eb8d-31da-8d3d-89400b8d69ea","vendor":{"name":"TryGhost"}}]}}],"enisaIdAdvisory":[]}