CVE-2024-23725

Published: Jan 21, 2024

Modified: May 30, 2025

PUBLISHED

Ghost before 5.76.0 allows XSS via a post excerpt in excerpt.js. An XSS payload can be rendered in post summaries.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.