Threats tagged 'ghsa-qrh6-cwg3-343x'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-103288Ghost · Authorization Bypass in Comment Like Feature High7.12026-10-27GCVE DatabaseCVE-2026-103288 CVE-2026-103288 is an authorization bypass vulnerability in the Ghost blogging platform's comment like feature. It allows authenticated members to delete comment likes or dislikes they are not authorized to remove. This issue affects Ghost versions from 5.9.0 up to but not including 6.44.1. The vulnerability is fixed in version 6.44.1. Report on CVE-2026-103288 Vulnerability CWE-943 #ghsa-qrh6-cwg3-343x #npm	GCVE Database	2026-10-27

Page 1 of 1