https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T10:09:41.229706+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-103285 CVE-2026-103285 — Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery 2026-10-03T10:09:41.232119+00:00

Affected: TryGhost Ghost

Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf of logged-in users. Attackers can craft a malicious link to the feedback page that automatically submits feedback when visited by authenticated members without their knowledge or consent.