CVE-2026-103277 - Ghost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbed
CVE ID :CVE-2026-103277 Published : Oct. 1, 2026, 10:42 a.m. | 35 minutes ago Description :Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally hosted scripts. Attackers can craft malicious...