Related VulnerabilitiesGhost CMS /assets/built 目录遍历漏洞(CVE-2023-32235)Ghost CMS /ghost/api/content/tags SQL 注入漏洞(CVE-2026-26980)PoCCVE-2026-26980: Ghost CMS Content API - SQL InjectionPoCCVE-2026-39365: Vite Dev Server - Path Traversal in Optimized Deps .map HandlingGhost CMS < 5.42.1存在sql注入漏洞(CVE-2026-26980)PoCghost-cms-installer: Ghost CMS Installation Setup - ExposurePoCCVE-2022-41697: Ghost CMS - User EnumerationPoCCVE-2021-29484: Ghost CMS <=4.32 - Cross-Site ScriptingPoCCVE-2023-32235: Ghost CMS < 5.42.1 - Path TraversalPoCCVE-2024-6420: Hide My WP Ghost < 5.2.02 - Hidden Login Page DisclosurePoCghost-takeover: ghost takeover detectionPEAR Archive Tar PHAR Protocol Handling 反序列化代码执行漏洞