| Package | Affected versions | Patched versions |
|---|---|---|
| ghost | < 5.76.0 | 5.76.0 |
| ghost | < 5.76.0 | 5.76.0 |
Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free