Ghost CMS vulnerable to critical authentication bypass flaw

A critical vulnerability in the Ghost CMS newsletter subscription system could allow external users to create newsletters or modify existing ones so that they contain malicious JavaScript.