Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2021-29484

36
FAUCET Score

CVE-2021-29484 is a Cross-Site Scripting (XSS) vulnerability affecting Ghost CMS versions 4.0.0 through 4.3.2, stemming from an unused endpoint. With a CVSS score of 6.8 (Medium), it allows untrusted users to gain Ghost Admin access if a logged-in user clicks a malicious link, leading to high confidentiality and integrity impact without requiring credentials. While Ghost(Pro) has been patched and no exploitation evidence exists there, self-hosted instances remain vulnerable. There is no evidence of active exploitation, but Nuclei templates exist, and the vulnerability has a high FAUCET Risk Score of 99/100, despite minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
>= 4.0.0, < 4.3.3CPE matchmatch criteria
cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 3.1

6.8MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
1.6
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
7.94%
Probability of exploitation in next 30 days
EPSS Percentile
94.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Nuclei: CVE-2021-29484 · Aug 1, 2021
This CVE's current EPSS score of 0.0794 is in the 95th percentile among its peer group of 705 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

npmpatch availablevia ghsa
Product: ghostFixed in: 4.3.3
github_advisoryworkaround availablevia nvd_reference
View patch

Vendor Advisories (1)

npmGHSA-9fgx-q25h-jxrgmedium

DOM XSS in Theme Preview

Apr 29, 2021

References

blog.sonarsource.com / ghost-admin-takeover
ExploitThird Party Advisory
forum.ghost.org / t/critical-security-update-available-for-ghost-4-x/22290
Vendor Advisory
github.com / TryGhost/Ghost/security/advisories/GHSA-9fgx-q25h-jxrg
MitigationThird Party Advisory
npmjs.com / package/ghost
ProductThird Party Advisory