Ghost: Stored cross-site scripting via {{ghost_head}} helper
Summary
Ghost versions from 0.5.3 before 6.50.0 do not sanitize data written into the JSON-LD tag emitted by the {{ghost_head}} theme helper. An authenticated user with a low-privilege account, such as a contributor or author, can inject script that runs in the published page. The script can compromise the session of a staff user with admin rights who views the affected page, and it can also affect site visitors.
Affected
- Ghost from 0.5.3 up to and including 6.50.0 (vendor advisory: versions >= 0.5.3, <= 6.50.0)
- Backports to older branches: Unknown.
Fixed in
- Ghost 6.50.0 contains the fix.
Workaround
Unknown. The CVE record provides no workaround. Check the vendor advisory for any additional details.
Exploitation
- No known in-the-wild exploitation according to the sources.
- Not listed in the CISA KEV catalog; no public proof-of-concept detected.
- CISA SSVC: exploitation none, automatable no, technical impact total.
- EPSS below 1 percent.
Our recommendation
- Update self-hosted Ghost instances to 6.50.0 or later as soon as possible. Ghost(Pro) customers should ask the vendor about the status of the hosted service.
- Review accounts with contributor, author or staff roles and remove those that are no longer needed.
- Review content from contributors before staff open it in the admin area.
- Use a separate browser session for admin work.
- Check the GitHub security advisory for additional details or backports.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-mp9q-4q6m-44f5 github.com
- VulnCheck advisory: Ghost 0.5.3 before 6.50.0 XSS via ghost_head www.vulncheck.com
- OSV: BIT-ghost-2026-103292 osv.dev
- Ghost release v6.50.0 (mirror) newreleases.io
- Ghost documentation: ghost_head helper docs.ghost.org
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 09:31.
Original description (NVD)
Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the {{ghost_head}} helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to compromise of a staff user's admin session when that user views the affected page.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.