[ghost] Arbitrary file upload in Ghost

An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-27139
• https://youtu.be/FCqWEvir2wE
• https://github.com/advisories/GHSA-fvc6-qjp7-m4g4