Headline
GHSA-fh38-9fgr-454w: Cross-site Scripting in Ghost
Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.
Cross-site Scripting in Ghost
Moderate severity GitHub Reviewed Published Jan 21, 2024 to the GitHub Advisory Database • Updated Jan 22, 2024