Kulik-Labs-Development/Ghost-CMS-Code-Injection-Audit-CVE-2026-26980
PoCOutdated Ghost CMS websites that have fallen become compromised from CVE-2026-26980 can suffer from spam code injection to pages. Use this to mass clear and edit code injection fields.
view exploit source poc_in_githubauthor Kulik-Labs-Developmentpublished 2026-05-20catalog poc_in_github
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-26980US | high7.5 | Exploit | ||
Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. This issue has been fixed… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan