Skip to content
OpenAdvisories

Package · npm

@tryghost/portal

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-24778

    Ghost vulnerable to XSS via malicious Portal preview links

    Ghost is an open source content management system. In Ghost versions 5.43.0 through 5.12.04 and 6.0.0 through 6.14.0, an attacker was able to craft a malicious link that, when accessed by an authenticated staff user or member, would execute JavaScript with th…

    TryGhost Ghost ghost @tryghost/portal npm