Six Apart Movable Type Cross-Site Scripting Vulnerability (CNVD-2022-22650)

Six Apart Movable Type (MT) is a blogging system from Six Apart, Inc. A cross-site scripting vulnerability exists in Six Apart Movable Type due to a lack of validation and escaping of user-supplied data in the “Create Entry, Page and Content Type” interface, which could be exploited by remote attackers to Unspecified vectors to inject arbitrary script or HTML.