Related VulnerabilitiesGhost CMS /assets/built 目录遍历漏洞(CVE-2023-32235)PoCibm-mfp-default-login: IBM MobileFirst Foundation - Default CredentialsGhost CMS /ghost/api/content/tags SQL 注入漏洞(CVE-2026-26980)PoCCVE-2025-64500: Symfony HttpFoundation - Access Control Bypass via PATH_INFOPoCCVE-2026-26980: Ghost CMS Content API - SQL InjectionGhost CMS < 5.42.1存在sql注入漏洞(CVE-2026-26980)PoCghost-cms-installer: Ghost CMS Installation Setup - ExposurePoCCVE-2022-31678: VMWare Cloud Foundation NSX-V - XML External Entity (XXE)PoCCVE-2022-41697: Ghost CMS - User EnumerationPoCCVE-2021-29484: Ghost CMS <=4.32 - Cross-Site ScriptingPoCCVE-2023-32235: Ghost CMS < 5.42.1 - Path TraversalPoCCVE-2024-6420: Hide My WP Ghost < 5.2.02 - Hidden Login Page DisclosurePoCCVE-2020-1938: Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability