CVE-2021-20812

2021-08-2601:20:41

jpcert

www.cve.org

0.001 Low

EPSS

Percentile

46.8%

JSON

Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series) and Movable Type Premium Advanced 1.44 and earlier) allows remote attackers to inject arbitrary script or HTML via unspecified vectors.

CNA Affected

[
  {
    "product": "Movable Type",
    "vendor": "Six Apart Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series) and Movable Type Premium Advanced 1.44 and earlier"
      }
    ]
  }
]