Vulnerability Spotlight: XSS vulnerability in Ghost CMS
Cisco Talos discovered stored cross-site scripting vulnerabilities in Ghost CMS, tracked as TALOS-2022-1686 (CVE-2022-47194 through CVE-2022-47197), in fields such as social media links that appear on all of a user's posts and author pages. Talos confirmed...