CVE-2026-105649 | TryGhost up to 6.64.x SVG Image cross site scripting

October 5, 2026 Yanac

A vulnerability classified as problematic has been found in TryGhost Ghost up to 6.64.x. This issue affects some unknown processing of the component SVG Image Handler. Performing a manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-105649. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More