Threats tagged 'ghsa-x3mg-q38v-m562'

A missing authorization vulnerability in TryGhost Ghost allows users with the Author role to delete posts and pages they did not author. This issue affects Ghost versions from 5.81.0 up to but not including 6.60.0. The vulnerability has been fixed in version 6.60.0. The CVSS score is 6.5, indicating a medium severity impact primarily affecting availability. No known exploits are reported in the wild.