Ghost CMS Vulnerability Exploited to Hack Over 700 Websites (opens in new tab)

A patched SQL injection flaw in Ghost CMS has been mass exploited. A recently patched SQL injection flaw in Ghost CMS has been exploited in mass attacks against unpatched sites. Threat actors stole Admin API keys and injected malicious JavaScript into articles, enabling large‑scale ClickFix attacks. More than 700 websites including those of Harvard, Oxford, […] The post appeared first on <a href="