{"id":"CVE-2026-103276","published":"2026-10-01T11:17:23.237","lastModified":"2026-10-01T15:06:17.330","description":"Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-173"],"vendors":[],"products":[],"references":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-6v8p-3jx9-8chr","tags":[]},{"url":"https://www.vulncheck.com/advisories/ghost-before-6.20.0-file-read-via-url-encoding-bypass","tags":[]}],"exploitRefs":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-6v8p-3jx9-8chr","tags":[]}],"hasPoc":true,"ai":null}