Vulnerability Spotlight: XSS vulnerability in Ghost CMS
Summary: Cisco Talos discovered stored cross-site scripting vulnerabilities in Ghost CMS, tracked as TALOS-2022-1686 (CVE-2022-47194 through CVE-2022-47197), in fields such as social media links that appear on all of a user's posts and author pages. Talos confirmed that a full privilege escalation to administrator can be achieved with the correct JavaScript payload, triggered when a higher-privilege user previews or visits a post by the malicious user, and tested the issue on Ghost 5.9.4.
What you should know: In default installations, a Contributor who can only draft posts holds the same effective privileges as an administrator, because a single preview of that draft can escalate the account. Separating the admin domain as Ghost documents blocks the privileged API calls, but the default configuration leaves that gap open.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-47194CVE-2022-47197
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026