← All credits

nhattanhh

4 vulnerability records and advisories credit this contributor.

CVE-2026-104414

Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses

CVE-2026-104416

Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API

CVE-2026-104415

Ghost 0.7.2 before 6.64.0 Password Hash Ordering Disclosure via Admin API

CVE-2026-104412

Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignment