Security Advisory

CVE-2024-23725

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-21 00:00:00
Last updated 2025-05-30 14:24:10
Assigner mitre
State PUBLISHED

Description

Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.