Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existing member, modify that member's name, and inject content into newsletters sent to the member. Depending on the recipient's email client, the injected content may be rendered, resulting in HTML injection or cross-site scripting (XSS).
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 01 Oct 2026 11:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existing member, modify that member's name, and inject content into newsletters sent to the member. Depending on the recipient's email client, the injected content may be rendered, resulting in HTML injection or cross-site scripting (XSS). | |
| Title | Ghost 5.2.0 before 6.62.0 Unauthenticated Stripe Checkout Account Modification | |
| First Time appeared |
Ghost
Ghost ghost |
|
| Weaknesses | CWE-863 | |
| CPEs | cpe:2.3:a:ghost:ghost:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Ghost
Ghost ghost |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-10-01T10:42:07.674Z
Reserved: 2026-09-30T10:58:33.573Z
Link: CVE-2026-103266
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-01T11:17:21.737
Modified: 2026-10-01T11:17:21.737
Link: CVE-2026-103266
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses