Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server runni…

Ghost Node.js content management system contains a critical vulnerability affecting versions 0.7.2 to 6.19.0. Specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This represents a significant security risk allowing attackers to potentially take full control of affected Ghost installations. The vulnerability has been addressed in version 6.19.1. Organizations running Ghost CMS should immediately upgrade to the patched version to mitigate this threat.