CVE-2026-53943: Ghost Cache-Poisoning XSS via x-ghost-preview Header
A critical vulnerability (CVE-2026-53943) was discovered in Ghost, a popular blogging platform. An unauthenticated attacker can exploit this flaw to poison the cache, potentially leading to staff user account takeovers. Affected versions range from v4.0 to v6.36.0, and the issue is patched in v6.37.0.