Ghost CMS vulnerable to critical authentication bypass flaw

A critical vulnerability in the Ghost CMS newsletter subscription system could allow external users to create newsletters or modify existing ones so that they contain malicious JavaScript. [...]

authentication authentication bypass authentication bypass flaw bypass cms critical flaw ghost security vulnerable